From 28b2ab3ac40236ecec80e493e0ba1f5bdeb3d2f0 Mon Sep 17 00:00:00 2001 From: Giuseppe De Marco Date: Mon, 9 May 2022 14:33:23 +0200 Subject: [PATCH 1/2] chore: removed RSA1_5 as default enc alg --- src/cryptojwt/jwt.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/cryptojwt/jwt.py b/src/cryptojwt/jwt.py index 3eea464d..9460f235 100755 --- a/src/cryptojwt/jwt.py +++ b/src/cryptojwt/jwt.py @@ -88,7 +88,7 @@ def __init__( sign_alg="RS256", encrypt=False, enc_enc="A128CBC-HS256", - enc_alg="RSA1_5", + enc_alg="RSA-OAEP-256", msg_cls=None, iss2msg_cls=None, skew=15, From 619f9ef2ed60b6e95af02c9269a98e09922ed834 Mon Sep 17 00:00:00 2001 From: Giuseppe Date: Tue, 21 Jun 2022 10:50:19 +0200 Subject: [PATCH 2/2] feat: added A128GCM as default enc enc --- src/cryptojwt/jwt.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/cryptojwt/jwt.py b/src/cryptojwt/jwt.py index 9460f235..f6c738e8 100755 --- a/src/cryptojwt/jwt.py +++ b/src/cryptojwt/jwt.py @@ -87,7 +87,7 @@ def __init__( sign=True, sign_alg="RS256", encrypt=False, - enc_enc="A128CBC-HS256", + enc_enc="A128GCM", enc_alg="RSA-OAEP-256", msg_cls=None, iss2msg_cls=None,