Public and private are different
04A public key representation can be shared; private and symmetric key material must remain confidential.
Terms in this drawing
Related RFCs and changes
“Updates” changes part of an earlier RFC. “Obsoletes” replaces it. This list shows selected related documents.
DIAGRAM§ 9.2 ↗
RFC 7517 · § 9.2EXAMPLE
3 / 3
03
Publish safely
Remove private members before publishing the public key set.
Protocol participantThreat or exceptionProtocol controlSimplified drawings · precise section references
Read the updated RFC section ↗
Private JWKs contain additional secret members.
- Private JWKs contain additional secret members.
- A symmetric key’s k member is itself secret key material.
- Prevent disclosure of non-public JWK members.
The illustration is schematic. Example values are illustrative; profiles and later security guidance can add requirements.
Read the RFC section ↗Diagrams simplify the RFC. Read the linked sections for complete requirements.
Privacy