Subject: [jose] Enveloping Signature JSON library in Java

From: Anders Rundgren <[email-masked]>
Date: Sat, 24 Aug 2013 10:36:16 +0200

https://code.google.com/p/openkeystore/source/browse/library/trunk/src/org/webpki/#webpki%2Fjson

As expected the code for parsing and writing JSON documents with EnvelopedSignatures turned out to be absolutely trivial.

JWS is great for things like OpenID and OAuth but does (IMO) not really cut it for schemes where the *message* is the core and a signature is only there to vouch for the authenticity.

Note: this should *not* be regarded as criticism of JOSE.  It is only an indication that some communities may select other methods.  In the case of SKS/KeyGen2 there are so many other things that are "non-standard" like SM (Secure Messaging), that the EnvelopedSignatures solution is hardly noticeable :-)

Cheers
Anders