Oihana Php Enums

JwtAlgorithm uses ConstantsTrait

Enumeration of standard JOSE algorithm identifiers (the `alg` / `enc` header values defined by RFC 7518, plus widely deployed extensions).

Three families are exposed here:

Signature / MAC algorithms — values for the alg header of a JWS (RFC 7518 §3): HS*, RS*, ES*, PS*, EdDSA, ...
Key management algorithms — values for the alg header of a JWE (RFC 7518 §4): RSA-OAEP, A*KW, dir, ECDH-ES, ...
Content encryption algorithms — values for the enc header of a JWE (RFC 7518 §5): A128CBC-HS256, A256GCM, ...

Example:

$header =
[
    JwtHeader::ALG => JwtAlgorithm::RS256 ,
    JwtHeader::TYP => JwtType::JWT ,
] ;

References:

RFC 7518 §3 — JWS signature algorithms
RFC 7518 §4 — JWE key management algorithms
RFC 7518 §5 — JWE content encryption algorithms
RFC 8037 — EdDSA (Ed25519, Ed448)
RFC 8812 — secp256k1 (ES256K)
IANA JOSE Algorithms registry

Constants

A128CBC_HS256 : string = 'A128CBC-HS256': `A128CBC-HS256` — AES-128 CBC with HMAC SHA-256 (RFC 7518 §5.2).
A128GCM : string = 'A128GCM': `A128GCM` — AES-128 in Galois/Counter Mode (RFC 7518 §5.3).
A128GCMKW : string = 'A128GCMKW': `A128GCMKW` — Key wrapping with AES GCM using 128-bit key (RFC 7518 §4.7).
A128KW : string = 'A128KW': `A128KW` — AES Key Wrap using 128-bit key (RFC 7518 §4.4).
A192CBC_HS384 : string = 'A192CBC-HS384': `A192CBC-HS384` — AES-192 CBC with HMAC SHA-384 (RFC 7518 §5.2).
A192GCM : string = 'A192GCM': `A192GCM` — AES-192 in Galois/Counter Mode (RFC 7518 §5.3).
A192GCMKW : string = 'A192GCMKW': `A192GCMKW` — Key wrapping with AES GCM using 192-bit key.
A192KW : string = 'A192KW': `A192KW` — AES Key Wrap using 192-bit key (RFC 7518 §4.4).
A256CBC_HS512 : string = 'A256CBC-HS512': `A256CBC-HS512` — AES-256 CBC with HMAC SHA-512 (RFC 7518 §5.2).
A256GCM : string = 'A256GCM': `A256GCM` — AES-256 in Galois/Counter Mode (RFC 7518 §5.3).
A256GCMKW : string = 'A256GCMKW': `A256GCMKW` — Key wrapping with AES GCM using 256-bit key.
A256KW : string = 'A256KW': `A256KW` — AES Key Wrap using 256-bit key (RFC 7518 §4.4).
DIR : string = 'dir': `dir` — Direct use of a shared symmetric key as the Content Encryption Key (RFC 7518 §4.5).
ECDH_ES : string = 'ECDH-ES': `ECDH-ES` — ECDH Ephemeral Static key agreement (RFC 7518 §4.6).
ECDH_ES_A128KW : string = 'ECDH-ES+A128KW': `ECDH-ES+A128KW` — ECDH-ES + Concat KDF + AES Key Wrap with 128-bit key.
ECDH_ES_A192KW : string = 'ECDH-ES+A192KW': `ECDH-ES+A192KW` — ECDH-ES + Concat KDF + AES Key Wrap with 192-bit key.
ECDH_ES_A256KW : string = 'ECDH-ES+A256KW': `ECDH-ES+A256KW` — ECDH-ES + Concat KDF + AES Key Wrap with 256-bit key.
EDDSA : string = 'EdDSA': `EdDSA` — Edwards-curve DSA, with Ed25519 or Ed448 (RFC 8037).
ES256 : string = 'ES256': `ES256` — ECDSA using P-256 and SHA-256 (RFC 7518 §3.4).
ES256K : string = 'ES256K': `ES256K` — ECDSA using secp256k1 and SHA-256 (RFC 8812).
ES384 : string = 'ES384': `ES384` — ECDSA using P-384 and SHA-384 (RFC 7518 §3.4).
ES512 : string = 'ES512': `ES512` — ECDSA using P-521 and SHA-512 (RFC 7518 §3.4).
HS256 : string = 'HS256': `HS256` — HMAC using SHA-256 (RFC 7518 §3.2).
HS384 : string = 'HS384': `HS384` — HMAC using SHA-384 (RFC 7518 §3.2).
HS512 : string = 'HS512': `HS512` — HMAC using SHA-512 (RFC 7518 §3.2).
NONE : string = 'none': `none` — Unsecured JWS (RFC 7518 §3.6).
PBES2_HS256_A128KW : string = 'PBES2-HS256+A128KW': `PBES2-HS256+A128KW` — PBES2 with HMAC SHA-256 and A128KW (RFC 7518 §4.8).
PBES2_HS384_A192KW : string = 'PBES2-HS384+A192KW': `PBES2-HS384+A192KW` — PBES2 with HMAC SHA-384 and A192KW.
PBES2_HS512_A256KW : string = 'PBES2-HS512+A256KW': `PBES2-HS512+A256KW` — PBES2 with HMAC SHA-512 and A256KW.
PS256 : string = 'PS256': `PS256` — RSASSA-PSS using SHA-256 and MGF1 with SHA-256 (RFC 7518 §3.5).
PS384 : string = 'PS384': `PS384` — RSASSA-PSS using SHA-384 and MGF1 with SHA-384 (RFC 7518 §3.5).
PS512 : string = 'PS512': `PS512` — RSASSA-PSS using SHA-512 and MGF1 with SHA-512 (RFC 7518 §3.5).
RS256 : string = 'RS256': `RS256` — RSASSA-PKCS1-v1_5 using SHA-256 (RFC 7518 §3.3).
RS384 : string = 'RS384': `RS384` — RSASSA-PKCS1-v1_5 using SHA-384 (RFC 7518 §3.3).
RS512 : string = 'RS512': `RS512` — RSASSA-PKCS1-v1_5 using SHA-512 (RFC 7518 §3.3).
RSA1_5 : string = 'RSA1_5': `RSA1_5` — RSAES-PKCS1-v1_5 (RFC 7518 §4.2).
RSA_OAEP : string = 'RSA-OAEP': `RSA-OAEP` — RSAES OAEP using default parameters (RFC 7518 §4.3).
RSA_OAEP_256 : string = 'RSA-OAEP-256': `RSA-OAEP-256` — RSAES OAEP using SHA-256 and MGF1 with SHA-256 (RFC 7518 §4.3).

A128CBC_HS256

`A128CBC-HS256` — AES-128 CBC with HMAC SHA-256 (RFC 7518 §5.2).


    public
        string
    A128CBC_HS256
    = 'A128CBC-HS256'

A128GCM

`A128GCM` — AES-128 in Galois/Counter Mode (RFC 7518 §5.3).


    public
        string
    A128GCM
    = 'A128GCM'

A128GCMKW

`A128GCMKW` — Key wrapping with AES GCM using 128-bit key (RFC 7518 §4.7).


    public
        string
    A128GCMKW
    = 'A128GCMKW'

A128KW

`A128KW` — AES Key Wrap using 128-bit key (RFC 7518 §4.4).


    public
        string
    A128KW
    = 'A128KW'

A192CBC_HS384

`A192CBC-HS384` — AES-192 CBC with HMAC SHA-384 (RFC 7518 §5.2).


    public
        string
    A192CBC_HS384
    = 'A192CBC-HS384'

A192GCM

`A192GCM` — AES-192 in Galois/Counter Mode (RFC 7518 §5.3).


    public
        string
    A192GCM
    = 'A192GCM'

A192GCMKW

`A192GCMKW` — Key wrapping with AES GCM using 192-bit key.


    public
        string
    A192GCMKW
    = 'A192GCMKW'

A192KW

`A192KW` — AES Key Wrap using 192-bit key (RFC 7518 §4.4).


    public
        string
    A192KW
    = 'A192KW'

A256CBC_HS512

`A256CBC-HS512` — AES-256 CBC with HMAC SHA-512 (RFC 7518 §5.2).


    public
        string
    A256CBC_HS512
    = 'A256CBC-HS512'

A256GCM

`A256GCM` — AES-256 in Galois/Counter Mode (RFC 7518 §5.3).


    public
        string
    A256GCM
    = 'A256GCM'

A256GCMKW

`A256GCMKW` — Key wrapping with AES GCM using 256-bit key.


    public
        string
    A256GCMKW
    = 'A256GCMKW'

A256KW

`A256KW` — AES Key Wrap using 256-bit key (RFC 7518 §4.4).


    public
        string
    A256KW
    = 'A256KW'

DIR

`dir` — Direct use of a shared symmetric key as the Content Encryption Key (RFC 7518 §4.5).


    public
        string
    DIR
    = 'dir'

ECDH_ES

`ECDH-ES` — ECDH Ephemeral Static key agreement (RFC 7518 §4.6).


    public
        string
    ECDH_ES
    = 'ECDH-ES'

ECDH_ES_A128KW

`ECDH-ES+A128KW` — ECDH-ES + Concat KDF + AES Key Wrap with 128-bit key.


    public
        string
    ECDH_ES_A128KW
    = 'ECDH-ES+A128KW'

ECDH_ES_A192KW

`ECDH-ES+A192KW` — ECDH-ES + Concat KDF + AES Key Wrap with 192-bit key.


    public
        string
    ECDH_ES_A192KW
    = 'ECDH-ES+A192KW'

ECDH_ES_A256KW

`ECDH-ES+A256KW` — ECDH-ES + Concat KDF + AES Key Wrap with 256-bit key.


    public
        string
    ECDH_ES_A256KW
    = 'ECDH-ES+A256KW'

EDDSA

`EdDSA` — Edwards-curve DSA, with Ed25519 or Ed448 (RFC 8037).


    public
        string
    EDDSA
    = 'EdDSA'

ES256

`ES256` — ECDSA using P-256 and SHA-256 (RFC 7518 §3.4).


    public
        string
    ES256
    = 'ES256'

ES256K

`ES256K` — ECDSA using secp256k1 and SHA-256 (RFC 8812).


    public
        string
    ES256K
    = 'ES256K'

ES384

`ES384` — ECDSA using P-384 and SHA-384 (RFC 7518 §3.4).


    public
        string
    ES384
    = 'ES384'

ES512

`ES512` — ECDSA using P-521 and SHA-512 (RFC 7518 §3.4).


    public
        string
    ES512
    = 'ES512'

HS256

`HS256` — HMAC using SHA-256 (RFC 7518 §3.2).


    public
        string
    HS256
    = 'HS256'

HS384

`HS384` — HMAC using SHA-384 (RFC 7518 §3.2).


    public
        string
    HS384
    = 'HS384'

HS512

`HS512` — HMAC using SHA-512 (RFC 7518 §3.2).


    public
        string
    HS512
    = 'HS512'

NONE

`none` — Unsecured JWS (RFC 7518 §3.6).

Disallowed in practice for any security-bearing token. Many libraries reject it by default; clients MUST NOT accept it without explicit opt-in.


    public
        string
    NONE
    = 'none'

PBES2_HS256_A128KW

`PBES2-HS256+A128KW` — PBES2 with HMAC SHA-256 and A128KW (RFC 7518 §4.8).


    public
        string
    PBES2_HS256_A128KW
    = 'PBES2-HS256+A128KW'

PBES2_HS384_A192KW

`PBES2-HS384+A192KW` — PBES2 with HMAC SHA-384 and A192KW.


    public
        string
    PBES2_HS384_A192KW
    = 'PBES2-HS384+A192KW'

PBES2_HS512_A256KW

`PBES2-HS512+A256KW` — PBES2 with HMAC SHA-512 and A256KW.


    public
        string
    PBES2_HS512_A256KW
    = 'PBES2-HS512+A256KW'

PS256

`PS256` — RSASSA-PSS using SHA-256 and MGF1 with SHA-256 (RFC 7518 §3.5).


    public
        string
    PS256
    = 'PS256'

PS384

`PS384` — RSASSA-PSS using SHA-384 and MGF1 with SHA-384 (RFC 7518 §3.5).


    public
        string
    PS384
    = 'PS384'

PS512

`PS512` — RSASSA-PSS using SHA-512 and MGF1 with SHA-512 (RFC 7518 §3.5).


    public
        string
    PS512
    = 'PS512'

RS256

`RS256` — RSASSA-PKCS1-v1_5 using SHA-256 (RFC 7518 §3.3).


    public
        string
    RS256
    = 'RS256'

RS384

`RS384` — RSASSA-PKCS1-v1_5 using SHA-384 (RFC 7518 §3.3).


    public
        string
    RS384
    = 'RS384'

RS512

`RS512` — RSASSA-PKCS1-v1_5 using SHA-512 (RFC 7518 §3.3).


    public
        string
    RS512
    = 'RS512'

RSA1_5

`RSA1_5` — RSAES-PKCS1-v1_5 (RFC 7518 §4.2).

Vulnerable to Bleichenbacher-style attacks; prefer self::RSA_OAEP_256.


    public
        string
    RSA1_5
    = 'RSA1_5'

RSA_OAEP

`RSA-OAEP` — RSAES OAEP using default parameters (RFC 7518 §4.3).


    public
        string
    RSA_OAEP
    = 'RSA-OAEP'

RSA_OAEP_256

`RSA-OAEP-256` — RSAES OAEP using SHA-256 and MGF1 with SHA-256 (RFC 7518 §4.3).


    public
        string
    RSA_OAEP_256
    = 'RSA-OAEP-256'

JwtAlgorithm uses ConstantsTrait

Tags

Table of Contents

Constants

Constants

A128CBC_HS256

A128GCM

A128GCMKW

A128KW

A192CBC_HS384

A192GCM

A192GCMKW

A192KW

A256CBC_HS512

A256GCM

A256GCMKW

A256KW

DIR

ECDH_ES

ECDH_ES_A128KW

ECDH_ES_A192KW

ECDH_ES_A256KW

EDDSA

ES256

ES256K

ES384

ES512

HS256

HS384

HS512

NONE

PBES2_HS256_A128KW

PBES2_HS384_A192KW

PBES2_HS512_A256KW

PS256

PS384

PS512

RS256

RS384

RS512

RSA1_5

RSA_OAEP

RSA_OAEP_256