• 3.2.2 Release (2015-Apr-26)
    • isSafeJSONString undefined bugfix
    • readSafeJSONString undefined bugfix
    • sample codes bugfix
Assets 2

@kjur kjur released this Apr 19, 2015 · 4 commits to master since this release

  • JWS.verify method updated to mitigate signature replacement
    attacks:
    • add optional acceptAlgs argument to specify accepted
      signature algorithms to verify.
    • strict key type checking
Assets 2

@kjur kjur released this Apr 19, 2015 · 6 commits to master since this release

  • remove alg=none signature validation support.
  • jsjws will be merged into jsrsasign near in the future.
Assets 2

@kjur kjur released this Apr 19, 2015 · 12 commits to master since this release

  • jws 3.0.0 to 3.0.1
    • new KJUR.jws.IntDate class for time format of JWT
  • new online tool "tool_jwt.html" to generate and verify signed JWT
Assets 2

@kjur kjur released this Apr 19, 2015 · 13 commits to master since this release

  • easy and powerful sign and verify methods available
  • now supports HS{256,512},RS{256,384,512},ES{256,384},PS{256,384,512},none
    (i.e. supports all algorithms except HS384 and ES512.)
  • other existing signing and verfying methods are deprecated.
  • now supports signing by following keys:
    • PEM plain RSA PKCS#5 private key (NEW)
    • PEM encrypted RSA PKCS#5 private key (NEW)
    • PEM plain RSA/ECC PKCS#8 private key (NEW)
    • PEM encrypted RSA/ECC PKCS#8 private key (NEW)
    • RSAKey object of private key
    • KJUR.crypto.ECDSA object of private key (NEW)
  • now supports verifying by following keys:
    • PEM RSA/ECC PKCS#8 public key (NEW)
    • PEM RSA/ECC X.509 certificate
    • RSAKey object of public key
    • KJUR.crypto.ECDSA object of public key (NEW)
    • now supports following asymmetoric key algorithms
    • RSA
    • ECDSA (NEW)
    • RSAPSS
  • QUnit unit tests added.
Assets 2

@kjur kjur released this Apr 19, 2015 · 15 commits to master since this release

  • jws-2.0.js 2.0.2 to 2.0.3
    • support for rsasign 1.2.5 (verifyStringPSS arg bi to hex change)
    • small fix for jws-2.0.js (2.0.1 -> 2.0.2)
Assets 2

@kjur kjur released this Jul 23, 2013 · 17 commits to master since this release

  • 2.0.1 Release [Jul 23, 2013]
    • fix RSAPSS by David (github.com/davedoesdev)
      (jws-2.0.js, sample_{generate,verify}3.html)
Assets 2

@kjur kjur released this Jul 21, 2013 · 26 commits to master since this release

  • 2.0.0 Release [Jul 21, 2013]
    • merge David Halls's contribution. (https://github.com/davedoesdev, Thanks! Dave.)
    • class implementation was chagned
    • supports PS{256,512} signature algorithm
      NOTE: however still having issue on PS{256,512} support
    • jsrsasign codes are not included from this release
Assets 2

@kjur kjur released this Jul 21, 2013 · 41 commits to master since this release

  • 1.2.1 Release [May 7, 2013]
    • merge David Halls's contribution. (https://github.com/davedoesdev, Thanks! Dave.)
    • rsa.js: update for PKCS#1 OAEP support
    • rsa2.js: update for PKCS#1 OAEP support
    • rsasign-1.2.js: add PSS support
    • jsbn.js: small fix
    • jsbn2.js: update for probable prime fix, bnSquare
    • base64.js: small fix
    • base64x-1.1.js: small update on utf8tob64u, b64utoutf8
  • 1.2 Release [Mar 19, 2012]
    • 'JWSJS' class is now available for JSON Web Signature JSON Serialization
      (JWS-JS) which is a kind of parallel signature.
    • 'readSafeJSONString' method added to 'JWS' class.
    • utf8/Base64, utf8/Hex converting functions are added to 'base64x.js'.
    • New online tools for converting Base64URL added.
Assets 2