gchq / gchq/CyberChef

Operation request: PASETO (JWT alternative)

Open
#1,771 0 comments 1 reaction 0 assignees View on GitHub
operation
Dominant language
JavaScript
Stars
35.8k
Forks
4.1k
Avg merge
2d 26m
Merged PRs (30d)
33

Description

## Summary
Since JWT is supported I believe [PASETO](https://paseto.io/) should be implemented as well due to it's [superiority](https://paragonie.com/blog/2017/03/jwt-json-web-tokens-is-bad-standard-that-everyone-should-avoid).

Here's a quick mock-up I made of what the ingredient card could look like:

![image](https://github.com/gchq/CyberChef/assets/75134774/c825661b-fec1-48de-97c3-4417d82b9913)

Clicking the button would generate Asymmetric PASETO v4 keys and fill in the input fields, and if a private key is provided instead, the Public Key field would be updated accordingly (the field could be read-only).

### Example Input
```json
{
"id": "69ffd377-c7f1-4341-8411-efd4ce886e04",
"name": "John Doe",
"admin": true
}
```

### Example Output
```
v4.public.eyJhZG1pbiI6dHJ1ZSwiaWQiOiI2OWZmZDM3Ny1jN2YxLTQzNDEtODQxMS1lZmQ0Y2U4ODZlMDQiLCJuYW1lIjoiSm9obiBEb2UiLCJvaC1teSI6IllvdSBhcmUgYSBjdXJpb3VzIGxpdHRsZSBmZWxsYSwgYXJlbid0IHlvdT8gOikifdblou-fqzv2wp4C_tlX2ipR19F0fz5xm3NlHSUHhbZv2MYDykRCqsxRsTbEA8hy8MzUTRGB6yQUac2hZlAvVg4
```

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.