jose: Javascript Object Signing and Encryption and JSON Web Token library

[ apache, cryptography, library, program ] [ Propose Tags ]

An implementation of the Javascript Object Signing and Encryption (JOSE) and JSON Web Token (JWT) formats.

Web Encryption (JWE) is not yet implemented.

All JWS algorithms (HMAC, ECDSA, RSASSA-PKCS-v1_5 and RSASSA-PSS) are implemented, however, the ECDSA implementation is is vulnerable to timing attacks and should therefore only be used for JWS verification.

The Crypto.JOSE.Legacy module is provided for working with the Mozilla Persona (formerly BrowserID) key format. Only RSA keys are supported - DSA keys cannot be used and must be handled as opaque objects.

The version number tracks the IETF jose working group draft revisions. For now, expect breaking API changes on any version change except for the final (fourth) part being incremented.


[Skip to Readme]
Versions [faq] 0.1.26.0, 0.1.27.0, 0.2.31.0, 0.2.33.0, 0.2.38.0, 0.2.38.1, 0.3.38.0, 0.3.41.0, 0.3.41.1, 0.3.41.2, 0.4.0.0, 0.4.0.1, 0.4.0.2, 0.4.0.3, 0.4.0.4, 0.5.0.0, 0.5.0.1, 0.5.0.2, 0.5.0.3, 0.5.0.4, 0.5.0.5, 0.6.0.0, 0.6.0.1, 0.6.0.2, 0.6.0.3, 0.7.0.0, 0.8.0.0
Dependencies aeson (>=0.7 && <0.9), attoparsec, base (==4.*), base64-bytestring (==1.0.*), bifunctors (>=4.0), byteable (==0.1.*), bytestring (==0.10.*), certificate (==1.3.*), crypto-pubkey (>=0.2.3), crypto-pubkey-types (>=0.3.2), crypto-random (>=0.0.7 && <0.0.9), cryptohash (==0.11.*), data-default-class, ghc-prim, integer-gmp, lens (>=4.3), network-uri (>=2.6), safe (>=0.3), semigroups (>=0.15), template-haskell (>=2.4), text (>=1.1), time (==1.4.*), unordered-containers (==0.2.*), vector [details]
License Apache-2.0
Copyright Copyright (C) 2013, 2014 Fraser Tweedale
Author Fraser Tweedale
Maintainer frase@frase.id.au
Category Cryptography
Home page https://github.com/frasertweedale/hs-jose
Bug tracker https://github.com/frasertweedale/hs-jose/issues
Source repo head: git clone https://github.com/frasertweedale/hs-jose.git
Uploaded by frasertweedale at Tue Dec 30 01:21:21 UTC 2014
Distributions Arch:0.7.0.0, LTSHaskell:0.8.0.0, NixOS:0.8.0.0, Stackage:0.8.0.0
Downloads 9414 total (371 in the last 30 days)
Rating (no votes yet) [estimated by rule of succession]
Your Rating
  • λ
  • λ
  • λ
Status Hackage Matrix CI
Docs available [build log]
Last success reported on 2014-12-30 [all 1 reports]

Modules

[Index]

Downloads

Maintainer's Corner

For package maintainers and hackage trustees


Readme for jose-0.3.38.0

[back to package description]

jose - Javascript Object Signing and Encryption & JWT (JSON Web Token)

jose is a Haskell implementation of Javascript Object Signing and Encryption and [JSON Web Token] (https://datatracker.ietf.org/doc/draft-ietf-oauth-json-web-token/).

Encryption (JWE) is not supported but signing is supported. All key types and algorithms are supported, but EC and symmetric key generation is not yet implemented.

Contributions are welcome.