Builds a new Elliptic Curve JWK. @return The Elliptic Curve JWK. @throws IllegalStateException If the JWK parameters were

@see #toJSONString

Returns the size of this JWK. @return The JWK size, in bits.

Returns the state of this JWE object. @return The state.

Returns the Java Cryptography Architecture (JCA) context. May be used to set a specific JCA security provider or secure random generator. @return The

Retrieves a list of JWKs matching the specified selector. @param jwkSelector A JWK selector. Must not be {@code null}. @param context Optional co

Returns a BouncyCastle JCA provider instance. @return The BouncyCastle JCA provider instance.

Returns the names of the supported encryption methods by the JWE provier. These correspond to the {@code enc} JWE header parameter. @return The suppo

Instantiates a cipher with an (optional) JCA provider. @param name The name of the cipher. Must not be {@code null}. @param provider The JCA prov

Sets the ID ({@code kid}) of the JWK. The key ID can be used to match a specific key. This can be used, for instance, to choose a key within a {@link

Gets the ID ({@code kid}) of this JWK. The key ID can be used to match a specific key. This can be used, for instance, to choose a key within a {@link

Base64URL-encodes the specified byte array. @param bytes The byte array to encode. Must not be {@code null}. @return The resulting Base64URL object.

Checks if the specified JWS algorithm is supported by the default system JCA provider(s). @param alg The JWS algorithm. Must not be {@code null}. @r

Returns the payload of this JOSE object. @return The payload, {@code null} if not available (for an encrypted JWE object that hasn't been dec

Parses a JWE object from the specified string in compact form. The parsed JWE object will be given an {@link State#ENCRYPTED} state. @param s The str

Encrypts this JWE object with the specified encrypter. The JWE object must be in an {@link State#UNENCRYPTED unencrypted} state. @param encrypter The

Decrypts this JWE object with the specified decrypter. The JWE object must be in a {@link State#ENCRYPTED encrypted} state. @param decrypter The JWE

Serialises this JWE object to its compact format consisting of Base64URL-encoded parts delimited by period ('.') characters. It must be in a {@link St

Gets the Key Encryption Key (KEK). @return The Key Encryption Key.

Returns the JOSE name of this cryptographic curve. @return The JOSE name.

Decodes this Base64 object to an unsigned big integer. <p>Same as {@code new BigInteger(1, base64.decode())}. @return The resulting big integer.

Gets the use ({@code use}) of this JWK. @return The key use, {@code null} if not specified or if the key is intended for signing as well as e

Returns a string representation of this payload. @return The string representation.

Gets the JCA provider to be used for all operations. @return The JCA provider to be used for all operations where a more specific one is abse

Gets the encryption method ({@code enc}) parameter. @return The encryption method parameter.

Gets the modulus value ({@code n}) of the RSA key. @return The RSA key modulus. It is represented as the Base64URL encoding of the value's bi

Gets the public exponent ({@code e}) of the RSA key. @return The public RSA key exponent. It is represented as the Base64URL encoding of the

Decodes this Base64 object to a byte array. @return The resulting byte array.

Gets the intended JOSE algorithm ({@code alg}) for this JWK. @return The intended JOSE algorithm, {@code null} if not specified.

Gets the operations ({@code key_ops}) for this JWK. @return The key operations, {@code null} if not specified.

Sets the JCA provider to be used for all operations. @param provider The JCA provider to be used for all operations where a more spec

Returns the names of the supported algorithms by the JWE provider instance. These correspond to the {@code alg} JWE header parameter. @return The sup

Returns the cryptographic curve. @return The cryptographic curve.

Gets the X.509 certificate chain ({@code x5c}) of this JWK. @return The X.509 certificate chain as a unmodifiable list, {@code null} if not s

Sets a specific JCA provider for the key encryption. @param keProvider The specific JCA provider to be used for the key encryption,

Gets the X.509 certificate SHA-1 thumbprint ({@code x5t}) of this JWK. @return The X.509 certificate SHA-1 thumbprint, {@code null} if not sp

Sets a specific JCA provider for the content encryption. @param ceProvider The specific JCA provider to be used for the content enc

Returns the names of the supported algorithms by the JWS provider instance. These correspond to the {@code alg} JWS header parameter. @return The sup

Returns {@code true} if the specified JWK matches. @param key The JSON Web Key (JWK). Must not be {@code null}. @return {@code true} if the JWK mat

Gets the X.509 certificate SHA-256 thumbprint ({@code x5t#S256}) of this JWK. @return The X.509 certificate SHA-256 thumbprint, {@code null} if

Sets the specified claim (registered or custom). @param name The name of the claim to set. Must not be {@code null}. @param value The v

Gets a string member of a JSON object. @param o The JSON object. Must not be {@code null}. @param key The JSON object member key. Must not be {@cod

Gets the type ({@code typ}) parameter. @return The type parameter, {@code null} if not specified.

Returns the state of this JWS object. @return The state.

Gets the X.509 certificate URL ({@code x5u}) of this JWK. @return The X.509 certificate URL, {@code null} if not specified.

Returns a reference to the underlying key store. @return The underlying key store, {@code null} if none.

Gets the private exponent ({@code d}) of the RSA key. @return The private RSA key exponent. It is represented as the Base64URL encoding of th

Returns a Base64URL representation of the header. If the header was parsed always returns the original Base64URL (required for JWS validation and auth

Sets the intended JOSE algorithm ({@code alg}) for the JWK. @param alg The intended JOSE algorithm, {@code null} if not specified. @retur

Sets a custom (non-registered) parameter. @param name The name of the custom parameter. Must not match a registered parameter name and

Sets the private Elliptic Curve key. The alternative method is {@link #d}. @param priv The private EC key, used to obtain the private 'd'

Gets the names of all included parameters (registered and custom) in the header instance. @return The included parameters.

Gets the public 'x' coordinate for the elliptic curve point. @return The 'x' coordinate. It is represented as the Base64URL encoding of the c

Gets the public 'y' coordinate for the elliptic curve point. @return The 'y' coordinate. It is represented as the Base64URL encoding of the c

Gets the critical header parameters ({@code crit}) parameter. @return The names of the critical header parameters, as a unmodifiable set, {@c

Checks the signature of this JWS object with the specified verifier. The JWS object must be in a {@link State#SIGNED signed} state. @param verifier T

Infers the key type for the specified JOSE algorithm. @param alg The JOSE algorithm. May be {@code null}. @return The key type, {@code null} if it c

Gets the JOSE header of the JSON Web Token (JWT). @return The header.

Gets the type ({@code kty}) of this JWK. @return The key type.

Sets the use ({@code use}) of the JWK. @param use The key use, {@code null} if not specified or if the key is intended for signing as well

Returns {@code true} if the specified JOSE object matches. @param joseObject The JOSE object. Must not be {@code null}. @return {@code true} if the

Sets the critical header parameters ({@code crit}) parameter. @param crit The names of the critical header parameters, empty set or {@cod

Appends the specified JWK matcher parameter to a string builder. @param sb The string builder. Must not be {@code null}. @param key The parame

Gets the keys (ordered) of this JSON Web Key (JWK) set. @return The keys, empty list if none.

Signs this JWS object with the specified signer. The JWS object must be in a {@link State#UNSIGNED unsigned} state. @param signer The JWS signer. Mus

Gets the content type ({@code cty}) parameter. @return The content type parameter, {@code null} if not specified.

Gets a custom (non-registered) parameter. @param name The name of the custom parameter. Must not be {@code null}. @return The custom par

Sets the subject ({@code sub}) claim. @param sub The subject claim, {@code null} if not specified. @return This builder.

Returns the parameter specification for this cryptographic curve. @return The EC parameter specification, {@code null} if it cannot be determ

Returns a standard {@code java.security.interfaces.ECPrivateKey} representation of this Elliptic Curve JWK. Uses the default JCA provider. @return Th

Returns the bit length of the specified byte length. @param byteLength The byte length. @return The bit length.

Decodes a base 64 or base 64 URL-safe encoded string. May contain line separators. Any illegal characters are ignored. @param b64String The base 64 o

Gets the audience ({@code aud}) claim. @return The audience claim, empty list if not specified.

Parses a public / private RSA JWK from the specified JSON object string representation. @param s The JSON object string to parse. Must not be {@code

Parses a DER-encoded X.509 certificate. @param derEncodedCert The DER-encoded X.509 certificate, as a byte array. May be {@code

Returns a copy of this octet sequence key value as a byte array. @return The key value as a byte array.

Gets the algorithm ({@code alg}) parameter. @return The algorithm parameter.

Gets the custom (non-registered) parameters. @return The custom parameters, as a unmodifiable map, empty map if none.

Gets the issuer ({@code iss}) claim. @return The issuer claim, {@code null} if not specified.

Parses a public / private Elliptic Curve JWK from the specified JSON object string representation. @param s The JSON object string to parse. Must not

Serialises the JSON Web Token (JWT) to its compact format consisting of Base64URL-encoded parts delimited by period ('.') characters. @return The ser

Returns a standard {@code java.security.interfaces.ECPublicKey} representation of this Elliptic Curve JWK. Uses the default JCA provider. @return The

Returns the byte length of the specified bit length. @param bitLength The bit length. @return The byte byte length.

Gets the specific JCA provider for the key encryption. @return The applicable JCA provider, {@code null} implies the default system provider.

Returns the JSON object string representation of this JWK. @return The JSON object string representation.

Gets the public RSA key. @return The public RSA key.

Gets the secure random generator. Intended for generation of initialisation vectors and other purposes that require a secure random generator. @retur

Loads a JWK from the specified JCE key store. The JWK can be a public / private {@link RSAKey RSA key}, a public / private {@link ECKey EC key}, or a

Gets the specified claim (registered or custom). @param name The name of the claim. Must not be {@code null}. @return The value of the claim, {@code

Gets the private 'd' coordinate for the elliptic curve point. It is represented as the Base64URL encoding of the coordinate's big endian representatio