RFC 9864: Fully-Specified Algorithms for JSON Object Signing and Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)
Recent RFCs 2025-10-30
Summary:
This specification refers to cryptographic algorithm identifiers that
fully specify the cryptographic operations to be performed, including
any curve, key derivation function (KDF), and hash functions, as
being "fully specified". It refers to cryptographic algorithm
identifiers that require additional information beyond the algorithm
identifier to determine the cryptographic operations to be performed
as being "polymorphic". This specification creates fully-specified
algorithm identifiers for registered JSON Object Signing and
Encryption (JOSE) and CBOR Object Signing and Encryption (COSE)
polymorphic algorithm identifiers, enabling applications to use only
fully-specified algorithm identifiers. It deprecates those
polymorphic algorithm identifiers.
This specification updates RFCs 7518, 8037, and 9053. It deprecates
polymorphic algorithms defined by RFCs 8037 and 9053 and provides
fully-specified replacements for them. It adds to the instructions to
designated experts in RFCs 7518 and 9053.