That still doesn't address how the key is transmitted.

A solution for encryption requires (1) a way to encrypt a JWE under a given
key, and (2) a way to transmit wrapped keys.  You are proposing a solution
to (1), with some mechanism for (2).

JWE already solves (1) and (2), just not in a way that the keys are
separable. Because the keys are included under the JWE integrity check, the
JWE integrity check value will be different for each wrapped key.

Your answer already concedes that there is no benefit to including the key
under the JWE integrity check.  We should just make it that way with JWE in
general and the issue will be resolved.





On Mon, Feb 25, 2013 at 2:19 PM, jose issue tracker <
[email protected]> wrote:

> #4: Impossible to separate wrapped key from encrypted data
>
>
> Comment (by [email protected]):
>
>  4.6 Dierct Encryption with a Shared Symmetric Key of JWA seems to be
>  addressing the needs in this ticket.
>
> --
> -------------------------+-------------------------------------------------
>  Reporter:               |       Owner:  draft-ietf-jose-json-web-
>   [email protected]        |  [email protected]
>      Type:  defect       |      Status:  new
>  Priority:  major        |   Milestone:
> Component:  json-web-    |     Version:
>   encryption             |  Resolution:
>  Severity:  Active WG    |
>   Document               |
>  Keywords:               |
> -------------------------+-------------------------------------------------
>
> Ticket URL: <http://trac.tools.ietf.org/wg/jose/trac/ticket/4#comment:1>
> jose <http://tools.ietf.org/jose/>
>
> _______________________________________________
> jose mailing list
> [email protected]
> https://www.ietf.org/mailman/listinfo/jose
>
_______________________________________________
jose mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/jose

Reply via email to