RFC 7517: JSON Web Key (JWK)

A JSON Web Key (JWK) is a JavaScript Object Notation (JSON) data structure that represents a cryptographic key. This specification also defines a JWK Set JSON…

Read RFC 7517 on the RFC Editor

Outgoing relationships (21 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 3986: Uniform Resource Identifier (URI): Generic Syntax
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 3629: UTF-8, a transformation format of ISO 10646
Normative reference — RFC 4648: The Base16, Base32, and Base64 Data Encodings
Normative reference — RFC 2046: Multipurpose Internet Mail Extensions (MIME) Part Two: Media Types
Normative reference — RFC 2818: HTTP Over TLS
Normative reference — RFC 4949: Internet Security Glossary, Version 2
Normative reference — RFC 20: ASCII format for network interchange
Normative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Normative reference — RFC 7159: The JavaScript Object Notation (JSON) Data Interchange Format
Normative reference — RFC 7515: JSON Web Signature (JWS)
Normative reference — RFC 7518: JSON Web Algorithms (JWA)
Normative reference — RFC 7516: JSON Web Encryption (JWE)
Normative reference — RFC 4945: The Internet IP Security PKI Profile of IKEv1/ISAKMP, IKEv2, and PKIX
Informative reference — RFC 5226: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 6838: Media Type Specifications and Registration Procedures
Informative reference — RFC 3447: Public-Key Cryptography Standards (PKCS) #1: RSA Cryptography Specifications Version 2.1
Informative reference — RFC 7519: JSON Web Token (JWT)
Informative reference — RFC 6030: Portable Symmetric Key Container (PSKC)

Incoming relationships (25 related RFCs)

Normatively referenced by — RFC 7518: JSON Web Algorithms (JWA)
Normatively referenced by — RFC 7591: OAuth 2.0 Dynamic Client Registration Protocol
Normatively referenced by — RFC 7638: JSON Web Key (JWK) Thumbprint
Normatively referenced by — RFC 7800: Proof-of-Possession Key Semantics for JSON Web Tokens (JWTs)
Normatively referenced by — RFC 8705: OAuth 2.0 Mutual-TLS Client Authentication and Certificate-Bound Access Tokens
Normatively referenced by — RFC 9140: Nimble Out-of-Band Authentication for EAP (EAP-NOOB)
Normatively referenced by — RFC 9421: HTTP Message Signatures
Normatively referenced by — RFC 9449: OAuth 2.0 Demonstrating Proof of Possession (DPoP)
Normatively referenced by — RFC 9635: Grant Negotiation and Authorization Protocol (GNAP)
Normatively referenced by — RFC 7520: Examples of Protecting Content Using JSON Object Signing and Encryption (JOSE)
Normatively referenced by — RFC 8812: CBOR Object Signing and Encryption (COSE) and JSON Object Signing and Encryption (JOSE) Registrations for Web Authentication (WebAuthn) Algorithms
Normatively referenced by — RFC 9677: Content Delivery Network Interconnection (CDNI) Metadata for Delegated Credentials
Normatively referenced by — RFC 9728: OAuth 2.0 Protected Resource Metadata
Normatively referenced by — RFC 9932: Mutually Authenticating TLS in the Context of Federations
Normatively referenced by — RFC 9964: ML-DSA for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)
Informatively referenced by — RFC 8152: CBOR Object Signing and Encryption (COSE)
Informatively referenced by — RFC 9052: CBOR Object Signing and Encryption (COSE): Structures and Process
Informatively referenced by — RFC 8725: JSON Web Token Best Current Practices
Informatively referenced by — RFC 9126: OAuth 2.0 Pushed Authorization Requests
Informatively referenced by — RFC 7797: JSON Web Signature (JWS) Unencoded Payload Option
Informatively referenced by — RFC 9278: JWK Thumbprint URI
Informatively referenced by — RFC 9679: CBOR Object Signing and Encryption (COSE) Key Thumbprint
Informatively referenced by — RFC 8292: Voluntary Application Server Identification (VAPID) for Web Push
Informatively referenced by — RFC 9246: URI Signing for Content Delivery Network Interconnection (CDNI)
Informatively referenced by — RFC 9901: Selective Disclosure for JSON Web Tokens