This library enables JSON-based encryption and signing the latest version of the JOSE specifications:

• JSON Web Encryption
• JSON Web Signature
• JSON Web Key
• JSON Web Encryption

In general, I try to be compliant to the specs as written. In some areas where the spec is ambiguous, I've made choices. There may be particular divergence in the JSON serialization, but that's largely because that serialization is very ambiguous in the current spec.

Note 1: All of the JWA algorithms are implemented here, except for "none" which should not be used

Note 2: This is very much a work in progress, so bugs may be plentiful, and documentation sparse.

$ sudo python setup.py install
$ python -c "import jose.tests.quickstart"
$ python -c "import jose.tests.examples"
$ python -c "import jose.tests.testall"

#!/usr/bin/env python

import jose
from jose.serialize import serialize_compact

plaintext = "Attack at dawn!"
jwe_header = { "alg":"A128KW", "enc":"A128GCM" }
jws_header = { "alg":"HS256" }
keys = [{ "kty":"oct", "k":"i-ueSNQgcr0q7auC8YUrYg" }]

# Encrypt into the JSON serialization
jwe1 = jose.encrypt(jwe_header, keys, plaintext)
dec1 = jose.decrypt(jwe1, keys)

# Encrypt into the compact serialization
jwe2 = serialize_compact( \
        jose.encrypt(jwe_header, keys, plaintext, protect="*"))
dec2 = jose.decrypt(jwe2, keys)

# Sign into the JSON serialization
jws1 = jose.sign(jws_header, keys, plaintext)
ver1 = jose.verify(jws1, keys)

# Sign into the compact serialization
jws2 = serialize_compact( \
        jose.sign(jws_header, keys, plaintext, protect="*"))
ver2 = jose.verify(jws2, keys)

• Tests using this JOSE implementation
  • examples.py: Examples from the JOSE specs
  • testall.py: Complete test of all algorithms
  • quickstart.py: The above example
• JOSE library
  • jose.py: Top-level JOSE functions
  • josecrypt.py: JOSE-level crypto routines, indexed by JOSE identifiers
  • util.py: JOSE-ish base64 function
• Crypto Polyfills (mine)
  • ecc.py: ECDH and ECDSA implementation, adapted from
  • polyfills.py: Polyfills for crypto algorithms not in libraries, as well as JOSE combinations
• Crypto libraries (someone else's)
  • aes_gcm.py: AES-GCM implementation
  • elliptic.py: Elliptic curve math
  • curves.py: NIST elliptic curve constants
  • PBKDF2.py: PyCrypto implementation of PBKDF2