oauth2.dev

crv

IESG

Registry Context

For an OKP JWK, `crv` identifies the key subtype and is required.

Technical Summary

RFC 8037 Section 2 requires the `crv` parameter in JWKs whose `kty` is `OKP`. Its value contains the key subtype from the JSON Web Elliptic Curve registry.

When Used

When representing public or private OKP keys as JWKs.

Normative Requirements

The `crv` parameter

MUST
1
  1. RFC 8037 - Section 2

    be present and contain the key subtype from the JSON Web Elliptic Curve registry.

    Condition: For a JWK using the `OKP` key type

    The parameter "crv" MUST be present and contain the subtype of the key (from the "JSON Web Elliptic Curve" registry).

Validation Guidance

error

Reject an OKP JWK that omits `crv`.

error

Reject an OKP JWK whose `crv` value does not identify a key subtype from the JSON Web Elliptic Curve registry.

Reference

Details

Entry Id
crv
Parameter Name
crv
Parameter Description
Curve
Used With Kty Value
EC
Parameter Information Class
Public
Change Controller
IESG
Reference
RFC7518 - Section 6.2.1.1