<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">An interim JOSE working group meeting was held yesterday and today at Cisco in Denver. The good news is that many issues were discussed and resolved in a productive manner.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I wanted to give you a heads-up that two minor changes will be made to the JOSE specs that do affect OpenID Connect. One is that the syntax for the PKIX key type will be changed from having the x5c member be in an independent “kty”:“PKIX”
element to being a member within the “kty”:“RSA” (or “kty”:“EC” structure). So the example at
<a href="http://openid.net/specs/openid-connect-messages-1_0-17.html#PKIXKeyType">
http://openid.net/specs/openid-connect-messages-1_0-17.html#PKIXKeyType</a> would change to:<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> {"keys":[<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> {"kty":"RSA",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> "use":"sig",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> "kid":"1b94c",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> "n":"vrj…",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> "e":"AQAB",<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> "x5c":<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> ["MII…=="]}<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-family:"Courier New""> ]}<o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This only affects code that is using the PKIX key type.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">The second change is that the contents of the Additional Associated Data (AAD) value in JWE will be simplified to only include the Encoded JWE Header value but not the Encoded JWE Encrypted Key. This means that the value X computed in
step 15 of <a href="http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-10#section-5.1">
http://tools.ietf.org/html/draft-ietf-jose-json-web-encryption-10#section-5.1</a> will be used directly as the AAD value, without computing Y (in step 16) and concatenating it to X (in step 17).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">This change simplifies the encryption AAD calculation.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I will plan on incorporating these changes into the JOSE drafts as soon as possible. Hopefully this will be the last breaking change to the encryption calculation.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"> Best wishes,<o:p></o:p></p>
<p class="MsoNormal"> -- Mike<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>