nic-6443 commented on code in PR #13913:
URL: https://github.com/apache/apisix/pull/13913#discussion_r3915032261
##########
docs/en/latest/plugins/jwe-decrypt.md:
##########
@@ -178,7 +178,7 @@ To generate a JWE token for the Consumer, use any JWE
library that supports dire
base64url(header).<empty>.base64url(iv).base64url(ciphertext).base64url(tag)
```
-where the header is `{"alg":"dir","enc":"A256GCM","kid":"<consumer-key>"}`;
`alg` and `enc` are rejected if they are set to anything else. The IV must be
unique and randomly generated for every token; never reuse an IV with the same
key.
+where the header is `{"alg":"dir","enc":"A256GCM","kid":"<consumer-key>"}`;
`alg` and `enc` are rejected if they are set to anything else. `A256GCM` is
defined with a 96-bit IV and a 128-bit authentication tag, and a token carrying
either at another length is rejected. The IV must be unique and randomly
generated for every token; never reuse an IV with the same key.
Review Comment:
Rephrased to name the parts: "a token whose IV or authentication tag has
another length is rejected". Same wording in the Chinese doc.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
