News for hackers. Stuff that matters.
Re:Brute forcing JSON Web Tokens in C by CiPHPerCoder on Saturday January 21, 2017 @05:40PM (#13452494)
The last thing the Internet needs more of is foot-bullety ECDSA deployed at scale.

Point of order: Does ES256 enforce RFC 6979? If not, how do you know you aren't repeating k-values?

The only sane crypto in the JWT specification is, sadly, HMAC.

There are no comments on this comment yet.