@hackage jose0.2.33.0

Javascript Object Signing and Encryption and JSON Web Token library

An implementation of the Javascript Object Signing and Encryption (JOSE) and JSON Web Token (JWT) formats.

Web Encryption (JWE) is not yet implemented.

All JWS algorithms (HMAC, ECDSA, RSASSA-PKCS-v1_5 and RSASSA-PSS) are implemented, however, the ECDSA implementation is is vulnerable to timing attacks and should therefore only be used for JWS verification.

The version number tracks the IETF jose working group draft revisions. For now, expect breaking API changes on any version change except for the final (fourth) part being incremented.