JSON Web Encryption

JSON Web Encryption is an IETF standard providing a standardized syntax for the exchange of encrypted data, based on JSON and Base64. It is defined by. Along with JSON Web Signature, it is one of the two possible formats of a JWT. JWE forms part of the JavaScript Object Signing and Encryption suite of protocols.

Vulnerabilities

In March 2017, a serious flaw was discovered in many popular implementations of JWE, the invalid curve attack.
One implementation of an early version of JWE also suffered from Bleichenbacher’s attack.