JOSE JWE A256GCM
JWE AEAD AES-256-GCM modern standard.
Definition
JWE structure: header (alg + enc + kid) . encrypted_key . iv . ciphertext . authentication_tag. enc=A256GCM is the preferred modern option vs A128CBC-HS256 (CBC mode deprecated). Combined with alg=ECDH-ES (Elliptic Curve Diffie-Hellman Ephemeral Static) for key agreement without pre-shared key. Adopted by Open Banking, healthcare, eIDAS 2 EUDIW.
Origin
IETF JOSE WG, RFC 7516 published May 2015.
Usage
Recommended for secure transport of tokens, sensitive data between microservices, encrypted healthcare FHIR payloads.