Cloudflare Workers Support

## JSON Web Key Type Support

The JWK `kty` (Key Type) Parameter identifies the key type.

| Key type       | Supported | JWK `kty` value | Parameters                               |
| -------------- | --------- | --------------- | ---------------------------------------- |
| RSA            | ✓         | `RSA`           |                                          |
| Elliptic Curve | ✓         | `EC`            | `crv` (Curve): `P-256`, `P-384`, `P-521` |
| Octet Key Pair | ✓         | `OKP`           | `crv` (Subtype): `Ed25519`, `X25519`     |
| Octet sequence | ✓         | `oct`           |                                          |

## JWS Algorithm Support

The JWS `alg` (Algorithm) Header Parameter identifies the digital signature or Message Authentication Code (MAC) algorithm.

| Algorithm                                    | Supported | JWS `alg` values          |
| -------------------------------------------- | --------- | ------------------------- |
| RSASSA-PKCS1-v1_5 using SHA-2                | ✓         | `RS256`, `RS384`, `RS512` |
| RSASSA-PSS using SHA-2 and MGF1 with SHA-2   | ✓         | `PS256`, `PS384`, `PS512` |
| ECDSA using P-256, P-384, or P-521 and SHA-2 | ✓         | `ES256`, `ES384`, `ES512` |
| EdDSA using Ed25519                          | ✓         | `EdDSA`, `Ed25519`        |
| HMAC with SHA-2                              | ✓         | `HS256`, `HS384`, `HS512` |

## JWE Key Management Algorithm Support

The JWE `alg` (Algorithm) Header Parameter identifies the key management algorithm.

| Key management algorithm                                       | Supported | JWE `alg` values                                                 |
| -------------------------------------------------------------- | --------- | ---------------------------------------------------------------- |
| Key Wrapping with AES Key Wrap                                 | ✓         | `A128KW`, `A192KW`, `A256KW`                                     |
| Key Encryption with AES GCM                                    | ✓         | `A128GCMKW`, `A192GCMKW`, `A256GCMKW`                            |
| Direct Encryption                                              | ✓         | `dir`                                                            |
| Key Encryption with RSAES OAEP                                 | ✓         | `RSA-OAEP`, `RSA-OAEP-256`, `RSA-OAEP-384`, `RSA-OAEP-512`       |
| Key Encryption with PBES2 (HMAC SHA-2 and AES Key Wrap)        | ✓         | `PBES2-HS256+A128KW`, `PBES2-HS384+A192KW`, `PBES2-HS512+A256KW` |
| Direct Key Agreement using ECDH-ES                             | ✓         | `ECDH-ES`                                                        |
| Key Agreement with Key Wrapping using ECDH-ES and AES Key Wrap | ✓         | `ECDH-ES+A128KW`, `ECDH-ES+A192KW`, `ECDH-ES+A256KW`             |

## JWE Content Encryption Algorithm Support

The JWE `enc` (Encryption Algorithm) Header Parameter identifies the content encryption algorithm used for authenticated encryption of the plaintext.

| Content encryption algorithm | Supported | JWE `enc` values                                  |
| ---------------------------- | --------- | ------------------------------------------------- |
| AES GCM                      | ✓         | `A128GCM`, `A192GCM`, `A256GCM`                   |
| AES_CBC_HMAC_SHA2            | ✓         | `A128CBC-HS256`, `A192CBC-HS384`, `A256CBC-HS512` |

---

See also

- [Algorithm Selection Guide][]
- [Algorithm Key Requirements][]
- [Browser Support][]
- [Bun Support][]
- [Deno Support][]
- [Electron Support][]
- [Node.js Support][]

[Bun Support]: https://github.com/panva/jose/issues/471
[Browser Support]: https://github.com/panva/jose/issues/263
[Deno Support]: https://github.com/panva/jose/issues/266
[Electron Support]: https://github.com/panva/jose/issues/264
[Node.js Support]: https://github.com/panva/jose/issues/262
[Algorithm Selection Guide]: https://github.com/panva/jose/issues/114
[Algorithm Key Requirements]: https://github.com/panva/jose/issues/210


Navigation Menu

Uh oh!

Cloudflare Workers Support #265

JSON Web Key Type Support

JWS Algorithm Support

JWE Key Management Algorithm Support

JWE Content Encryption Algorithm Support

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Key type	Supported	JWK `kty` value	Parameters
RSA	✓	`RSA`
Elliptic Curve	✓	`EC`	`crv` (Curve): `P-256`, `P-384`, `P-521`
Octet Key Pair	✓	`OKP`	`crv` (Subtype): `Ed25519`, `X25519`
Octet sequence	✓	`oct`

Algorithm	Supported	JWS `alg` values
RSASSA-PKCS1-v1_5 using SHA-2	✓	`RS256`, `RS384`, `RS512`
RSASSA-PSS using SHA-2 and MGF1 with SHA-2	✓	`PS256`, `PS384`, `PS512`
ECDSA using P-256, P-384, or P-521 and SHA-2	✓	`ES256`, `ES384`, `ES512`
EdDSA using Ed25519	✓	`EdDSA`, `Ed25519`
HMAC with SHA-2	✓	`HS256`, `HS384`, `HS512`

Key management algorithm	Supported	JWE `alg` values
Key Wrapping with AES Key Wrap	✓	`A128KW`, `A192KW`, `A256KW`
Key Encryption with AES GCM	✓	`A128GCMKW`, `A192GCMKW`, `A256GCMKW`
Direct Encryption	✓	`dir`
Key Encryption with RSAES OAEP	✓	`RSA-OAEP`, `RSA-OAEP-256`, `RSA-OAEP-384`, `RSA-OAEP-512`
Key Encryption with PBES2 (HMAC SHA-2 and AES Key Wrap)	✓	`PBES2-HS256+A128KW`, `PBES2-HS384+A192KW`, `PBES2-HS512+A256KW`
Direct Key Agreement using ECDH-ES	✓	`ECDH-ES`
Key Agreement with Key Wrapping using ECDH-ES and AES Key Wrap	✓	`ECDH-ES+A128KW`, `ECDH-ES+A192KW`, `ECDH-ES+A256KW`

Content encryption algorithm	Supported	JWE `enc` values
AES GCM	✓	`A128GCM`, `A192GCM`, `A256GCM`
AES_CBC_HMAC_SHA2	✓	`A128CBC-HS256`, `A192CBC-HS384`, `A256CBC-HS512`

Uh oh!

Cloudflare Workers Support #265

Description

JSON Web Key Type Support

JWS Algorithm Support

JWE Key Management Algorithm Support

JWE Content Encryption Algorithm Support

Activity

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions