RSA256 and RSA-OAEP-256 for JWT encryption

VCL TMS Cryptography Pack
1

Hi, I need RSA-OAEP-256 for JWT encryption (JWE). I have to use it with Xdata.
Can manage this with TMS Cryptography pack?
Thanks

2

Hi Stefano,
I haven't tested this very example but TMS CP contains both RSA-OAEP and SHA256 algorithms.
Regards,
bernard

3

Hi,
RSA-OAEP-256 in not possibile, your keys have lenght is to a minimum kl2048.
But i must use JWE standard (I need a signed and crypted JWT) in TMS XDATA or SPARKLE to comply with requests from the external service.
How I can solve?
Thanks in advance.

4

We only support RSA 2048, 3072 and 4096 bit keys.

5

So Xdata cannot handle JWTs signed and encrypted by standard JWE specifications.
Any solution to make an Xdata server compatible with this standard (which our competitors support towards centralized systems)?
Thanks

7

JWT support in XData is based on Paolo Rossi's, JWT for Delphi framework: GitHub - paolo-rossi/delphi-jose-jwt: Delphi implementation of JOSE (JSON Object Signing and Encryption) and JWT (JSON Web Token)

Afaik it still doesn't support JWE.