COSE
CBOR Object Signing and Encryption (COSE)
JOSEのCBOR版
https://datatracker.ietf.org/wg/cose/about/
署名、暗号化とWeb Token (JWT/CWT)を分離した?
CBOR Object Signing and Encryption (COSE)
CBORオブジェクト署名と暗号化
RFC 9052 COSE: 構造とプロセス Structures and Process
https://tex2e.github.io/rfc-translater/html/rfc9052.html
RFC 9053 COSE: 初期アルゴリズム Initial Algorithms
RFC 9054 COSE: ハッシュアルゴリズム Hash Algorithms
RFC 9338 COSE: 副署名 Countersignatures
RFC 9360 COSE: X.509証明書の伝送と参照のためのヘッダーパラメータ Header Parameters for Carrying and Referencing X.509 Certificates
RFC 9459 COSE: AES-CTR and AES-CBC
RFC 9528 Ephemeral Diffie-Hellman Over COSE (EDHOC)
RFC 9596 COSE "typ" (type) Header Parameter
RFC 9597 CBOR Web Token (CWT) Claims in COSE Headers
RFC 9668 Using Ephemeral Diffie-Hellman Over COSE (EDHOC) with the Constrained Application Protocol (CoAP) and Object Security for Constrained RESTful Environments (OSCORE)
RFC 9679 COSE Key Thumbprint
RFC 8152 (旧) → 9052 9053
RFC 8392 CBOR Web Token (CWT)
STD 96 は RFC 9052 と RFC 9338
RFC 8778 Use of the HSS/LMS Hash-Based Signature Algorithm with COSE
RFC 8812 COSE and JOSE Registrations for Web Authentication (WebAuthn) Algorithms
table:比較
COSE JOSE
符号化 CBOR JSON
基本情報 RFC 8392 CWT, 9052 2. Basic Cose Structure, RFC 9596,9597 JWT
署名 RFC 9052 4. Signing JWS (RSA/ECDSA)
RFC 9052 6. MAC Objects JWS (HMAC)
暗号 RFC 9052 5. Encryption Objects JWE
アルゴリズム RFC 9053, 9054 ? JWA
鍵 RFC 9052 7. Key JWK
CDDL
WebAuthn
RFC 8812 CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms