<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>Hi,</div>
<div> </div>
<div>I’ve been using <a href="http://jwt.io">http://jwt.io</a> to debug JWT tokens but couldn’t verify the signature. Anybody else having problems with that? I’ve also played a bit with Jose4j and Nimbus in Java but failed also.</div>
<div><br>
</div>
<div>Also, I may be wrong but apparently the RS256 minimum key size is 2048 so MitreId may want to update its default key (I know, I know, we should replace it anyway…but just to give a good example). And while at that, had an interesting error while trying
to sign (using Nimbus) a message with a locally generated key: “javax.crypto.BadPaddingException: Message is larger than modulus”. In that particular instance there was a bug in my code however while researching the error found out that there is a limitation
on the size of the encrypted text which is quite short (117 for 1024 bits key - TBC). So, is the JWT broken in chunks if above that size? How should I pad? </div>
<div><br>
</div>
<div>Regards,</div>
<div>Luiz</div>
</body>
</html>