Skip to content

Align with RFC 9864 (fully-specified algorithms) - #709

Merged
dajiaji merged 1 commit into
dajiaji:mainfrom
achamayou:achamayou-fully-specified-algorithms-rfc
Nov 9, 2026
Merged

dajiaji merged 1 commit into
dajiaji:mainfrom
achamayou:achamayou-fully-specified-algorithms-rfc

Conversation

@achamayou

@achamayou achamayou commented Nov 8, 2026 •

Copy link
Copy Markdown
Contributor

draft-ietf-jose-fully-specified-algorithms-13 has been published as RFC 9864. The COSE code points are unchanged from draft-13. This PR aligns references, constants and docs with the final RFC.

  • README: reference RFC 9864 instead of draft-13.
  • JOSE_ALGORITHMS_SUPPORTED: add Ed25519 and Ed448, which RFC 9864 §4.1.1 registers as JOSE algorithms. JOSE EdDSA is now deprecated (§4.1.2).
  • docs/algorithms.rst and const.py comments: mark EdDSA, ES256, ES384 and ES512 as deprecated (§4.2.2). Use the RFC descriptions for Ed25519 and Ed448.
  • README examples and their mirrored tests in tests/test_cose_sample_with_encode.py use Ed25519 instead of the deprecated EdDSA.
  • CHANGES.rst entry.

Not changed: keys created without an alg still default to EdDSA or ES256/ES384/ES512. Switching the defaults to the fully-specified algorithms would change the alg in signed output and may break existing verifiers.

I used AI to make this PR, but I did review all the changes and they are correct as far as I can tell. Keeping defaults unchanged when alg is not specified may be timid, but seems safest.

@codecov

codecov Bot commented Nov 8, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 97.07%. Comparing base (747f0f3) to head (bbac77b).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #709   +/-   ##
=======================================
  Coverage   97.07%   97.07%           
=======================================
  Files          32       32           
  Lines        3490     3490           
=======================================
  Hits         3388     3388           
  Misses        102      102           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@achamayou
achamayou marked this pull request as ready for review November 8, 2026 22:24
@dajiaji

dajiaji commented Nov 9, 2026

Copy link
Copy Markdown
Owner

Thanks @achamayou! LGTM.

Could you rebase onto the latest main? Once rebased, I'll merge it.

draft-ietf-jose-fully-specified-algorithms-13 was published as RFC 9864.
Code points are unchanged; update references, register Ed25519/Ed448 as
JOSE algorithms, mark EdDSA/ES256/ES384/ES512 as deprecated in docs, and
use Ed25519 instead of EdDSA in README examples and their mirrored tests.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@achamayou
achamayou force-pushed the achamayou-fully-specified-algorithms-rfc branch from 5970903 to bbac77b Compare November 9, 2026 10:09
@achamayou

Copy link
Copy Markdown
Contributor Author

Thanks @achamayou! LGTM.

Could you rebase onto the latest main? Once rebased, I'll merge it.

Of course! All done.

@dajiaji
dajiaji merged commit 9b5c0d5 into dajiaji:main Nov 9, 2026
17 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants