JWE

JWT encryption - payload confidentiality.

Definition

JWE structure: Header.EncryptedKey.IV.Ciphertext.AuthenticationTag separated by '.'. Algorithms: A256GCM (content), RSA-OAEP-256 (key wrap), ECDH-ES (key agreement). More complex than JWS. Used in FAPI 2.0 Advanced, NHS UK identity tokens.

Origin

IETF JOSE WG ; RFC 7516 published May 2015 alongside JWT and JWS.

Example in context

NHS UK uses JWE to transmit patient identifiers between health mobile apps.

Related terms

• JWT — parent format.