add example of response encryption

[bc-pi]

Add some examples showing an encrypted response and a corresponding request with jwks. For #520

[Sakurann]

CBC -> GCM

[Sakurann]

CBC -> GCM

[selfissued]

Please incorporate one of the two solutions to the inconsistency described #552 into the example (either restoring authorization_encrypted_response_alg or using authorization_encrypted_response_alg_values_supported and authorization_encrypted_response_enc_values_supported), depending upon which the working group prefers.

[bc-pi]

This has been updated to reconcile with changes in #555

[selfissued]

Reviewing this from my phone on a plane, so I'm going to trust that the encrypted content is correct.

[bc-pi]

Reviewing this from my phone on a plane, so I'm going to trust that the encrypted content is correct.

I did create and check the encrypted content but certainly having an independent check would be good too.

[c2bo]

Reviewing this from my phone on a plane, so I'm going to trust that the encrypted content is correct.

I did create and check the encrypted content but certainly having an independent check would be good too.

Looks good to me - this is what I get when decoding and decrypting:

Header:

{
  "alg": "ECDH-ES",
  "enc": "A128GCM",
  "kid": "ac",
  "epk": {
    "kty": "EC",
    "x": "nnmVpm3V3jbhcafQaRBkSVNHlwZHwt-9rOpJufyYIuk",
    "y": "r4fjDqwJys9qUOP-_b3mR5SZG--CwO2mic5VSNTYN9g",
    "crv": "P-256"
  }
}

Payload:

{
  "vp_token": {
    "example_credential_id": [
      "eyJhb...YMetA"
    ]
  }
}