JWS vs JWE

00:00 difference between JSON Web Signature Token and JSON Web Encryption token
00:40 JSON Web Signature tokens guarantees
02:13 JSON Web Encryption tokens guarantees
03:16 JWT compact serialization for JWS and JWE

There are two types of JSON Web Tokens (JWTs). There are JSON Web Signature Tokens (JWS token) that contain a digital signature or a MAC at the end (but don't have to). These tokens guarantee authenticity and data integrity. In case you are using digital signatures and not MACs, JWS also guarantee non-repudiation because contrary to MACs you do not have a share secret with digital signatures. Digital signatures rely on public key cryptography such as RSA and therefore only the public key is distributed. With the public key you can only verify signatures, but you cannot create signatures. Only the party that is in possession of the private key can actually create new signatures.

JSON Web Encryption tokens actually encrypt the plaintext. JWE tokens make use of a hybrid encryption schema where you make a key for a symmetric secret and then encrypt this key for the symmetric encryption algorithm with an asymmetric algorithm such as RSA or ECDSA. The reason is that asymmetric algorithms typically have hard limits on the amount of data they can transport. In addition the encryption and decryption process for larger amounts of data is way faster. JWE tokens use authenticated encryption schemes.

[jgoebel]

What do you think about this video?
Let me know in the comments below!

[SuperAdilMorocco]

Finally i understood JWT vs JWE VS JWS thx a lot 🎉

[nowoadisuryo]

Great explanation, easy to understand, thank you

[kismatvishwakarma]

Thanks for this video. Great explanation about the JWS and JWE. I follow your videos. They are really very good. Kindly explain the implementation of JWE. Thanks in advance

[Mohamad]

Even when explicitly researching jwe, it seems the internet is just flooded with jws but it’s being called JWT, very confusing especially when trying to find libraries to implement it!

[lavdev]

i hope the next tut is design pattern :3

[eli]

You should write a script before hand this comes across as messy and confusing. Maybe make a video covering this topic again.