RFC 8392: CBOR Web Token (CWT)

CBOR Web Token (CWT) is a compact means of representing claims to be transferred between two parties. The claims in a CWT are encoded in the Concise Binary…

Read RFC 8392 on the RFC Editor

Outgoing relationships (7 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 8174: Ambiguity of Uppercase vs Lowercase in RFC 2119 Key Words
Normative reference — RFC 8152: CBOR Object Signing and Encryption (COSE)
Informative reference — RFC 8126: Guidelines for Writing an IANA Considerations Section in RFCs
Informative reference — RFC 6838: Media Type Specifications and Registration Procedures
Informative reference — RFC 7515: JSON Web Signature (JWS)
Informative reference — RFC 7516: JSON Web Encryption (JWE)

Incoming relationships (18 related RFCs)

Normatively referenced by — RFC 8747: Proof-of-Possession Key Semantics for CBOR Web Tokens (CWTs)
Normatively referenced by — RFC 9200: Authentication and Authorization for Constrained Environments Using the OAuth 2.0 Framework (ACE-OAuth)
Normatively referenced by — RFC 9334: Remote ATtestation procedureS (RATS) Architecture
Normatively referenced by — RFC 9711: The Entity Attestation Token (EAT)
Normatively referenced by — RFC 9528: Ephemeral Diffie-Hellman Over COSE (EDHOC)
Normatively referenced by — RFC 9202: Datagram Transport Layer Security (DTLS) Profile for Authentication and Authorization for Constrained Environments (ACE)
Normatively referenced by — RFC 9203: The Object Security for Constrained RESTful Environments (OSCORE) Profile of the Authentication and Authorization for Constrained Environments (ACE) Framework
Normatively referenced by — RFC 9597: CBOR Web Token (CWT) Claims in COSE Headers
Normatively referenced by — RFC 9781: A Concise Binary Object Representation (CBOR) Tag for Unprotected CBOR Web Token Claims Sets (UCCS)
Normatively referenced by — RFC 9782: Entity Attestation Token (EAT) Media Types
Normatively referenced by — RFC 9679: CBOR Object Signing and Encryption (COSE) Key Thumbprint
Normatively referenced by — RFC 9783: Arm's Platform Security Architecture (PSA) Attestation Token
Normatively referenced by — RFC 9124: A Manifest Information Model for Firmware Updates in Internet of Things (IoT) Devices
Normatively referenced by — RFC 9668: Using Ephemeral Diffie-Hellman Over COSE (EDHOC) with the Constrained Application Protocol (CoAP) and Object Security for Constrained RESTful Environments (OSCORE)
Normatively referenced by — RFC 9770: Notification of Revoked Access Tokens in the Authentication and Authorization for Constrained Environments (ACE) Framework
Normatively referenced by — RFC 9943: An Architecture for Trustworthy and Transparent Digital Supply Chains
Informatively referenced by — RFC 9191: Handling Large Certificates and Long Certificate Chains in TLS-Based EAP Methods
Informatively referenced by — RFC 9942: CBOR Object Signing and Encryption (COSE) Receipts