End to End Encryption in Financial Data Sharing
summary
Financial data sharing standardizes application-layer encryption using nested JWS inside JWE with a hybrid approach: a symmetric content key encrypts payloads while that key is wrapped by an asymmetric keypair. Key discovery supports JWKS optional endpoints but leaves key-exchange choice to implementers. Transport still requires TLS 1.2+, encryption decrypts at the recipient application (not end-to-end to client devices), and the spec favors payload-level encryption (field-level optional) with a single org keypair per endpoint.
AI-written summary · about
chapters (5)
related talks
30mNo way, JOSE!
27mWT* is JWT?
30mSecuring the Connected World - Detangling Encryption and Decryption
30mWT* is JWT?
50mBuilding Production-Grade End to End Encrypted App...
44mThe Challenges of Building Safe End-to-End Encrypted Services for Business
05mEnd to End Encryption for Mobile Developers
15mEncryption at Rest – Master Key Based on a Hybrid KEM