The algorithm this library defaults to, and the one reference.conf ships
(#282). Asymmetric by default so a relying party can verify from the
published JWKS without ever holding a key that can also MINT tokens.
EdDSA (Ed25519) rather than RS256: it is fully supported by every layer here
(createAsymmetricKeyStore, the JWKS route's exportJWK, and jose's
importPKCS8/importSPKI), its keys and signatures are the smallest of the
supported set, and it has no parameter — key size, padding mode — that an
operator can get quietly wrong.
The algorithm this library defaults to, and the one
reference.confships (#282). Asymmetric by default so a relying party can verify from the published JWKS without ever holding a key that can also MINT tokens.EdDSA (Ed25519) rather than RS256: it is fully supported by every layer here (
createAsymmetricKeyStore, the JWKS route'sexportJWK, and jose'simportPKCS8/importSPKI), its keys and signatures are the smallest of the supported set, and it has no parameter — key size, padding mode — that an operator can get quietly wrong.