Content keys and recipient keys
02A content-encryption key protects the payload; a selected key-management mode establishes that key.
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 5.1 ↗
RFC 7516 · § 5.1EXAMPLE
3 / 3
03
Encrypt content
Use the CEK with the content-encryption algorithm.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
alg describes key management; enc describes content encryption.
- alg describes key management; enc describes content encryption.
- Key management may wrap, encrypt, agree on, or directly use a key according to the algorithm.
- The illustration uses a wrapped CEK; not every JWE mode has an encrypted-key value.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy