decentralized-identity / decentralized-identity/decentralized-web-node
xsalsa not supported by JWE
Open
artifact: spec
attr: security
type: enhancement
- Dominant language
- HTML
- Stars
- 413
- Forks
- 75
- PR merge metrics
- No merged PRs in 30d
Description
The *Supported Encryption Schemes* section states that `XSalsa20-Poly1305` is a supported encryption scheme. However, xsalsa is not and can not be supported by JWE because it lacks support for AAD.
Instead `XChaCha20-Poly1305` could be used. Note however that work is needed to finalize the xchacha [spec at ietf](https://datatracker.ietf.org/doc/html/draft-amringer-jose-chacha-02).
**Implementations with xchacha support:**
* [panva/jose](https://github.com/panva/jose)
* [did-jwt](https://github.com/decentralized-identity/did-jwt)
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.