When will JWE be available?

[CornievanSchoor]

When will the implementation be available?

[paolo-rossi]

Hello @CornievanSchoor ,

I was hoping to implement this feature not long after releasing v3 of the library but the task is not so simple due to the lack of imported OpenSSL header from Indy... meaning that I have to import manually a great deal of functions and structures. Of course it's not an impossible task (in fact I already imported additional functions from OpenSSL) but it's very time consuming! 😞 Plus, in order not to duplicate my work after a while, I was waiting for the adoption of OpenSSL 1.1 (3.0) by the Indy project but nothing happened (yet) there, so I'm in waiting mode here, sorry.

If you want to pursue (now) the task, the first thing is to import the APIs regarding the key generation from (rsa) parameters in order to support the JSON Web Key standard.

If you want to further discuss the topic we can move on the Discussions tab here on GitHub.

Ciao, Paolo.

[zaniniflz]

@paolo-rossi First of all congratulations for the work. I am using your library for a project and there was a need to use JWE. I implemented the algorithms I needed (RSA1_5 and A256CBC-HS512). I followed the pattern you set and it's all working, but maybe there's something you thought differently. Would you like to check it out?

[rbritus]

Hi @zaniniflz. I would really like to know about your JWE implementation, I just started using JOSE with Horse and this need arose. Would you help me out of this?

[zaniniflz]

@rbritus I implemented some features to meet my needs. Take a look at my fork. I have added support to RSA1.5 for sign and AES256CBC with HS512 for encryption.

If @paolo-rossi is interested in this improvement, I can send a PR.

https://github.com/zaniniflz/delphi-jose-jwt/commits/jwe

[rbritus]

@zaniniflz Thank you very much Zanini, you helped me a lot...

[paolo-rossi]

Hello @zaniniflz,

I totally missed your previous message, damn! :-)

Yes I'm very interested in this features, my mail is paolo [at] paolorossi [dot] net we can also setup a call in order to directly talk about it.

In the meantime, in the next days, I will look at your fork..

Thank you Francisco.

Ciao, Paolo.

[zaniniflz]

Hi @paolo-rossi

No problem, by the way this project helped me a lot, thanks for all the time you spent on this project. As I said before, I made an implementation to meet my needs. I followed your patterns but probably there are improvemements to be done. Let's talk here, and maybe we can work together to improve this feature.

[Makhaon]

Hello @zaniniflz, could you please provide examples of encode-decode jw messages? Thank you in advance

[zaniniflz]

Hello all,

I'll create the PR as soon as I have some free time.

[zaniniflz]

I just create thr PR #84

[eztitles]

Is decryption in the near future by any chance?