I'm very aware a bunch of stuff needs to change. There are lots of improvements to be made as well. I think I also have to add MIT as a license option. But this code dump represents a somewhat fully featured implementation of JWK and JWS. All tests pass. A few things worthy of note:

1. Signing and verification is streamed. This is useful for large detached signatures.

2. There is a manual base64 implementation embedded. This needs to be reconciled with base64ct.

3. There may be some pain points splitting this into separate crates. Particularly, I'm thinking about foreign trait impls.

4. There are questions about what to do with shared data types. For example: Thumbprint. Also, should JWS/JWE have a hard dependency on JWK?

5. I don't currently allow unknown header parameters due to this bug: https://github.com/serde-rs/serde/issues/2200

As always, your feedback is genuinely welcome. I'm not committed to anything.

@tarcieri @CBenoit @Erik1000

1. Please focus on reviewing the ENTIRE new crate; not just what appears in the diff. This is the first time this code has gone through a RustCrypto review.

2. This contains an independent implementation of Base64 from base64ct. One particular focus of this new crate is the ability to stream base64 encoding. This is essential for the streamed signing/verification in the future JWS crate.

3. The Bytes type is the most commonly used type in this crate besides the codec types. It decodes bytes from a base64 string in serde.

4. The Secret type is similar to Bytes, but adds additional invariants for secret handling.

5. The Json type is used for JWS (and JWE in the future). It is for nested JSON.

6. The Optional type is used to make encoding runtime optional. This is important for the b64 header value in JWS.

7. The Update trait is useful for implementing streaming in downstream crates. For example, it isn't only used for base64, but also for signing and verification.

MERGE THIS FIRST: https://github.com/RustCrypto/JOSE/pull/5

@tarcieri @CBenoit @Erik1000

Depends on the jose-b64 PR (#3). This covers four categories of functionality for jose-jwk:

1. JSON data types for parsing the RFC-defined data types.
2. The KeyInfo trait which describes core key functionality (strength and algo support).
3. Conversions to/from existing RustCrypto key types.
4. A new abstract RustCrypto Key type (matching the runtime invariants of Jwk).

MERGE THIS FIRST: #3

@tarcieri @CBenoit @Erik1000

refactor(jwa): move algorithm types into jose-jwa

Signed-off-by: Nathaniel McCallum [email protected]

MERGE THIS FIRST: https://github.com/RustCrypto/JOSE/pull/4