RSA-OAEP-256 Support?

[jwt]

RSA-OAEP-256 Support?

[excpt]

Hi @skalfyfan,

this library maintained.

There haven't been any updates lately, that's all.

Contributions are always welcome.

I recommend to explore the unit tests first. Add your specifications there and try to implement your algorithm. If you open a PR we will review it and if everything's fine - it will be merged.

[francescobbo]

Hi @skalfyfan.

First of all, sorry for the late reply, I've been very busy at work lately. I have all the best intentions into maintaining this gem. Any help is of course greatly appreciated.

At the moment the RSA-OAEP-256 algorithm is not implemented for two causes:

• I have not been able to find good documentation about the algorithm itself
• Unlike other key encryption algorithms, it looks like RSA-OAEP-256 has not been implemented by the OpenSSL library (which I am using for every single encryption/decryption piece of code).

Of course, I may have skimmed too fast in the huge/poor OpenSSL documentation, so please, double check ;)

Writing cryptographic code from scratch is usually a bad practice, and I would only fallback to this as a last resource.

[m94h]

https://github.com/potatosalad/ruby-jose has RSA-OAEP-256 support (https://www.rubydoc.info/gems/jose/file/docs/EncryptionAlgorithms.md)

[pean]

Unfortunately JOSE looks more or less unmaintained at the moment, and is still stuck on OpenSSL1.1 which is reaching end of life, it seems to be the only similar gem that supports RSA-OAEP-256 though.

Any chance it is time to reconsider implementing RSA-OAEP-256?