jwcrypto.git, branch conformance

Better validate that both alg and enc are present

2015-03-24T14:33:47+00:00

JOSE headers must include the "alg" and "enc" options in order to be
able to actually process and encrypted token.
Return appropriate messages if either is missing.

Add comments to push user to use JWS()

2015-03-24T13:51:55+00:00

People should not use JWSCore directly unless they know exactly what
they are doing. Added doc text to that regard.

Rename JWE.decrypt() to JWE._decrypt()

2015-03-24T13:49:40+00:00

Make the function private as it is not supposed to be used directly,
rather deserialize() should be used.

Fix AES blocksize handling and check keylengths

2015-03-18T19:24:10+00:00

AES blocksize is always 16 regardles of key length naturally.
Fix the code to assume the proper blocksize and IV length.
Also add tests to check proper key length and add missing
A192KW and A256KW key wrapping algorythms.
Add tests to try encrypting with all AES key-length combinations.

Thanks to Jan Rusnacko for pointing out this flaw.

Signed-off-by: Simo Sorce

Fix typos

2015-03-18T18:14:45+00:00

Signed-off-by: Simo Sorce

Change the way operation keys are retrieved

2015-03-18T18:12:09+00:00

This way we have less confusion about what the function is supposed to
do and less code duplication.

Signed-off-by: Simo Sorce

The protected header is optional in some cases

2015-03-18T17:44:24+00:00

Allow the use of a JWE without protected headers.

Thanks to Jan Rusnacko for pointing out this flaw.

Signed-off-by: Simo Sorce

Catch incompatible "use" and "key_ops" usage

2015-03-18T17:43:46+00:00

Thanks to Jan Rusnacko for pointing out this flaw.

Signed-off-by: Simo Sorce

Allow unknown key parameters

2015-03-18T17:09:16+00:00

Thanks to Jan Rusnacko for pointing out this flaw.

Signed-off-by: Simo Sorce

Add more checks, algorithms, tests

2015-03-09T05:31:45+00:00