Score:0

JSON Web Encryption (JWE) Key Wrapping Fundamentals - How To Encrypt Content Encryption Key?

vg flag

The JSON Web Encryption RFC 7516 says:

Encrypt the CEK with the recipient's public key using the RSAES-PKCS1-v1_5 [or RSAES-OAEP] algorithm to produce the JWE Encrypted Key.

Assuming a client/server architecture here where the server generates JWE tokens, does this mean that the client must initiate the JWA creation process by creating a public/private key pair and sending the public key to the server? This seems unusual as the general rule of thumb is that the private key encrypts while the public key decrypts?

Can someone help me understand the basic flow for JWA with Key Agreement & Key Wrapping?

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.