Associated data is checked too
03Authenticated encryption binds protected metadata as well as the encrypted content.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 5.2 ↗
RFC 7516 · § 5.2EXAMPLE
3 / 3
03
Changed metadata
A protected-header modification makes verification fail.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
The encoded protected header contributes to authenticated additional data.
- The encoded protected header contributes to authenticated additional data.
- JSON serialization can also carry explicit additional authenticated data.
- Any required authentication failure rejects the JWE.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy