1*e7b1675dSTing-Kang Chang // Copyright 2021 Google LLC 2*e7b1675dSTing-Kang Chang // 3*e7b1675dSTing-Kang Chang // Licensed under the Apache License, Version 2.0 (the "License"); 4*e7b1675dSTing-Kang Chang // you may not use this file except in compliance with the License. 5*e7b1675dSTing-Kang Chang // You may obtain a copy of the License at 6*e7b1675dSTing-Kang Chang // 7*e7b1675dSTing-Kang Chang // http://www.apache.org/licenses/LICENSE-2.0 8*e7b1675dSTing-Kang Chang // 9*e7b1675dSTing-Kang Chang // Unless required by applicable law or agreed to in writing, software 10*e7b1675dSTing-Kang Chang // distributed under the License is distributed on an "AS IS" BASIS, 11*e7b1675dSTing-Kang Chang // WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. 12*e7b1675dSTing-Kang Chang // See the License for the specific language governing permissions and 13*e7b1675dSTing-Kang Chang // limitations under the License. 14*e7b1675dSTing-Kang Chang // 15*e7b1675dSTing-Kang Chang /////////////////////////////////////////////////////////////////////////////// 16*e7b1675dSTing-Kang Chang 17*e7b1675dSTing-Kang Chang #ifndef TINK_JWT_JWT_KEY_TEMPLATES_H_ 18*e7b1675dSTing-Kang Chang #define TINK_JWT_JWT_KEY_TEMPLATES_H_ 19*e7b1675dSTing-Kang Chang 20*e7b1675dSTing-Kang Chang #include "proto/tink.pb.h" 21*e7b1675dSTing-Kang Chang 22*e7b1675dSTing-Kang Chang namespace crypto { 23*e7b1675dSTing-Kang Chang namespace tink { 24*e7b1675dSTing-Kang Chang 25*e7b1675dSTing-Kang Chang /////////////////////////////////////////////////////////////////////////////// 26*e7b1675dSTing-Kang Chang // Pre-generated KeyTemplate for Jwt key types. One can use these templates 27*e7b1675dSTing-Kang Chang // to generate new KeysetHandle object with fresh keys. The templates with 28*e7b1675dSTing-Kang Chang // the "Raw" prefix generate tokens without a "kid" header. 29*e7b1675dSTing-Kang Chang // 30*e7b1675dSTing-Kang Chang // To generate a new keyset that contains a single JwtHmacKey, one can do: 31*e7b1675dSTing-Kang Chang // 32*e7b1675dSTing-Kang Chang // auto status = JwtMacRegister(); 33*e7b1675dSTing-Kang Chang // if (!status.ok()) { /* fail with error */ } 34*e7b1675dSTing-Kang Chang // auto handle_result = 35*e7b1675dSTing-Kang Chang // KeysetHandle::GenerateNew(JwtHs256Template()); 36*e7b1675dSTing-Kang Chang // if (!handle_result.ok()) { /* fail with error */ } 37*e7b1675dSTing-Kang Chang // auto keyset_handle = std::move(handle_result.value()); 38*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtHs256Template(); 39*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtHs256Template(); 40*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtHs384Template(); 41*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtHs384Template(); 42*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtHs512Template(); 43*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtHs512Template(); 44*e7b1675dSTing-Kang Chang 45*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtEs256Template(); 46*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtEs256Template(); 47*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtEs384Template(); 48*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtEs384Template(); 49*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtEs512Template(); 50*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtEs512Template(); 51*e7b1675dSTing-Kang Chang 52*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtRs256_2048_F4_Template(); 53*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtRs256_2048_F4_Template(); 54*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtRs256_3072_F4_Template(); 55*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtRs256_3072_F4_Template(); 56*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtRs384_3072_F4_Template(); 57*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtRs384_3072_F4_Template(); 58*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtRs512_4096_F4_Template(); 59*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtRs512_4096_F4_Template(); 60*e7b1675dSTing-Kang Chang 61*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtPs256_2048_F4_Template(); 62*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtPs256_2048_F4_Template(); 63*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtPs256_3072_F4_Template(); 64*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtPs256_3072_F4_Template(); 65*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtPs384_3072_F4_Template(); 66*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtPs384_3072_F4_Template(); 67*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& JwtPs512_4096_F4_Template(); 68*e7b1675dSTing-Kang Chang const google::crypto::tink::KeyTemplate& RawJwtPs512_4096_F4_Template(); 69*e7b1675dSTing-Kang Chang 70*e7b1675dSTing-Kang Chang } // namespace tink 71*e7b1675dSTing-Kang Chang } // namespace crypto 72*e7b1675dSTing-Kang Chang 73*e7b1675dSTing-Kang Chang #endif // TINK_JWT_JWT_KEY_TEMPLATES_H_ 74