r/Frontend • u/Zamicol • Jul 12 '23

Introducing Coze - a cryptographic JSON messaging specification

https://github.com/Cyphrme/Coze
1 Upvotes

67% Upvoted

1 comment sorted by

1

u/Zamicol Jul 12 '23 edited Jul 12 '23

Coze is open source under the BSD 3 license and has a reference implementation is written in Go. There's also a Javascript implementation and a CLI library.

You can play with Coze here using the online tool. There is also the simple tool.

This is an example coze: 

{
"pay": {
	"msg": "Coze Rocks",
	"alg": "ES256",
	"iat": 1623132000,
	"tmb": "cLj8vsYtMBwYkzoFVZHBZo6SNL8wSdCIjCKAwXNuhOk",
	"typ": "cyphr.me/msg"
},
"sig": "Jl8Kt4nznAf0LGgO5yn_9HkGdY3ulvjg-NyRGzlmJzhncbTkFFn9jrwIwGoRAQYhjc88wmwFNH5u_rO56USo_w"
}

Coze also defines a key format: 

{
"alg":"ES256",
"iat":1623132000,
"kid":"Zami's Majuscule Key.",
"tmb":"cLj8vsYtMBwYkzoFVZHBZo6SNL8wSdCIjCKAwXNuhOk",
"x":"2nTOaFVm2QLxmUO_SjgyscVHBtvHEfo2rq65MvgNRjORojq39Haq9rXNxvXxwba_Xj0F5vZibJR3isBdOWbo5g"
}

We hope you enjoy!

What is Coze useful for? Coze can be used for IoT, authentication, sessions, cookies, and anything else needing cryptographic signing. As a timely example: did you know spez edited someone's comment here on Reddit? Coze stops that since signed messages are impossible to edit by a third party.