News for hackers. Stuff that matters.
Re:Brute forcing JSON Web Tokens in C by jsd1982 on Saturday January 21, 2017 @06:04PM (#13452590)
It is sensitive data so I can't share the payload for a (possibly unfounded) fear of brute-forcing the correct key used. I can tell you that the key is not an ASCII string (it is a random sequence of bits). The jwt.io debugger verified the signature when I gave it the proper key and failed to verify with the key "e" that this tool reported.

There are no comments on this comment yet.