José is a C-language implementation of the Javascript Object Signing and Encryption standards. Specifically, José aims towards implementing the following standards:

• RFC 7515 - JSON Web Signature (JWS)
• RFC 7516 - JSON Web Encryption (JWE)
• RFC 7517 - JSON Web Key (JWK)
• RFC 7518 - JSON Web Algorithms (JWA)
• RFC 7519 - JSON Web Token (JWT)
• RFC 7520 - Examples of ... JOSE
• RFC 7638 - JSON Web Key (JWK) Thumbprint

José is extensively tested against the RFC test vectors.

José provides a command-line utility which encompasses most of the JOSE features. This allows for easy integration into your project and one-off scripts. Below you will find examples of the common commands.

José can generate keys, remove private keys and show thumbprints. For example:

# Generate three different kinds of keys
$ jose gen -t '{"alg": "A128GCM"}' -o oct.jwk
$ jose gen -t '{"alg": "RSA1_5"}' -o rsa.jwk
$ jose gen -t '{"alg": "ES256"}' -o ec.jwk

# Remove the private keys
$ jose pub -i oct.jwk -o oct.pub.jwk
$ jose pub -i rsa.jwk -o rsa.pub.jwk
$ jose pub -i ec.jwk -o ec.pub.jwk

# Calculate thumbprints
$ jose thp -i oct.jwk
9ipMcxQLsI56Mqr3yYS8hJguJ6Mc8Zh6fkufoiKokrM
$ jose thp -i rsa.jwk
rS6Yno3oQYRIztC6np62nthbmdydhrWmK2Zn_Izmerw
$ jose thp -i ec.jwk
To8yMD92X82zvGoERAcDzlPP6awMYGM2HYDc1G5xOtc

José can sign and verify data. For example:

$ echo hi | jose sig -i- -k ec.jwk -o msg.jws
$ jose ver -i msg.jws -k ec.pub.jwk
hi
$ jose ver -i msg.jws -k oct.jwk
No signatures validated!

José can encrypt and decrypt data. For example:

$ echo hi | jose enc -i- -k rsa.pub.jwk -o msg.jwe
$ jose dec -i msg.jwe -k rsa.jwk
hi
$ jose dec -i msg.jwe -k oct.jwk
Decryption failed!