DOKK / manpages / debian 12 / jose / jose-jwk-thp.1.en

NAME

jose-jwk-thp - Calculates the JWK thumbprint

SYNOPSIS

jose jwk thp -i JWK [-H ALG] [-o THP]

The jose jwk thp command calculates the thumbprint of one or more JWKs.

•-i JSON, --input=JSON : Parse JWK(Set) from JSON

•-i FILE, --input=FILE : Read JWK(Set) from FILE

•-i -, --input=- : Read JWK(Set) standard input

•-a ALG, --algorithm=ALG : Use the specified hash algorithm (case sensitive)

•-a ?, --algorithm=? : List available hash algorithms

•-o FILE, --output=FILE : Write thumbprint(s) to FILE

•-o -, --output=- : Write thumbprint(s) to standard input

•-f THP, --find=THP : Search input keys for JWK with the given thumbprint

Calculate the S1 thumbprint of a newly generated key:

$ jose jwk gen -i '{"alg":"ES256"}' -a S1 | jose jwk thp -i-
BzmSH6W8a8LlbQ1mD0iBJdYj4x4

Calculate the S256 thumbprints of a JWKSet containing two keys:

$ jose jwk thp -i keys.jwkset -a S256
6HJwXEuRh8gAkTz4BodEvcEj_KXkgjc-7Qez3d4VNMs
jo_j_O5gqYpKcZKHPp3miTszAeV60MXHvdb_kkjjTWE

Find the input key with the given thumbprint:

$ jose jwk thp -i keys.jwkset -f HYRNOxxOOHap0amTONoy1bHnS5M -o key.jwk

Nathaniel McCallum <npmccallum@redhat.com>