frasertweedale / hs-jose

Haskell JOSE and JWT library
http://hackage.haskell.org/package/jose
Apache License 2.0
122 stars 46 forks source link

Initial support for JWE #120

Open kaol opened 9 months ago

kaol commented 9 months ago

Partial support for JWE encode and decode. Basic use is now possible both for encryption and decryption. Both GCM and CPC modes work for encrypt, decrypt is CPC only for now. For algorithms, RSA-OAEP works both ways. Deflate support is still missing, which is stated as mandatory for RFC 7516. Compact serialization and deserialization work.

JWEs' one ciphertext for potentially multiple recipients has been modeled with the same type variable usage that JWS uses for General/Flattened/Compact divide. CEK wrapping and unwrapping, and ciphertext generation and decode are represented as two stages of functions for each step.

More future work: JSON serializations likely still need more attention. Crypto.JOSE.Header may need some expanding to model shared and non-shared unprotected headers and what lenses to expose for JWEs needs consideration since arbitrary modifications may lead to invalid JWE data.