diff --git a/index.html b/index.html index fd4e9d5..ef0002b 100644 --- a/index.html +++ b/index.html @@ -820,6 +820,7 @@

JsonWebKey

publicKeyJwk
+

The `publicKeyJwk` property is REQUIRED, and its value MUST be a JSON Web Key that conforms to [[RFC7517]]. It is RECOMMENDED that verification methods that use @@ -827,6 +828,19 @@

JsonWebKey

their fragment identifier. It is RECOMMENDED that JWK `kid` values be set to the public key fingerprint [[RFC7638]]. See the first key in the example below for an instance of a public key with a compound key identifier. +

+

+As specified in Section 4.4 of the JWK specification, +the OPTIONAL `alg` property identifies the algorithm intended for use with the public key, +and SHOULD be included to prevent security issues that can arise when using the same +key with multiple algorithms. As specified in +Section 6.2.1.1 of the JWA specification, describing a key using an elliptic curve, +the REQUIRED `crv` property is used to identify the particular curve type of the public key. +As specified in Section 4.1.4 of the JWS specification, +the OPTIONAL `kid` property is a hint used to help discover the key; if present, the `kid` value SHOULD +match, or be included in, the `id` property of the encapsulating `JsonWebKey` object, +as part of the path, query, or fragment of the URL. +

secretKeyJwk
@@ -861,14 +875,9 @@

JsonWebKey

In the example above, the `publicKeyJwk` value contains the JSON Web Key. The `kty` property encodes the key type of "OKP", which means "Octet string key pairs". The `alg` property identifies the algorithm intended -for use with the public key. Although optional, it is RECOMMENDED that `alg` -be included, to avoid security issues arising from using the same key with multiple -algorithms. The `crv` property identifies the particular curve type of the -public key. The `kid` property is a hint used to help discover the key; if present, -the `kid` value SHOULD match, or be included in, the `id` property of the -encapsulating `JsonWebKey` object, as part of the path, query, or fragment of the -URL. Finally, the `x` property specifies the point on the Ed25519 curve that is -associated with the public key. +for use with the public key, which in this case is `ES384`. The `crv` property identifies +the particular curve type of the public key, `P-384`. The `x` property specifies +the point on the P-384 curve that is associated with the public key.