PASETO

Modern JWT without crypto footguns.

Definition

PASETO v3/v4 offers Local (XChaCha20-Poly1305 encrypted) and Public (Ed25519 signed). No manipulable alg header. Unencrypted footer for kid. Official libraries: Go, Rust, Python, Node. Adopted by BR Postal, some Fortune 500 internal protocols.

Origin

Specified by Scott Arciszewski (Paragon Initiative Enterprises) ; v1 published 2018 ; v4 stabilised 2021.

Example in context

An EDI API issues v4.public PASETOs signed Ed25519 — simpler to verify than JWT and free of algo confusion.

Related terms

• JWT — predecessor.