Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ECKey serialize may create invalid JWKS parameters #98

Open
schlenk opened this issue Aug 4, 2020 · 0 comments
Open

ECKey serialize may create invalid JWKS parameters #98

schlenk opened this issue Aug 4, 2020 · 0 comments

Comments

@schlenk
Copy link

schlenk commented Aug 4, 2020

Take a key for P-256 with x=24014791858128669844935517199947753409425201576699879295797457599559336031L

The jwkest.long2intarr() method turns that into an array of just 31 instead of 32 octets, which is too short for the base64 encoded value put into a JWKS file.

This can lead to problems when other libraries try to use that key, the pyjwkest library roundtrips it just fine.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant