BrowserID Public Keys follow the JWK specification and come in two flavors, as defined by their required kty parameter:
"RSA": As defined by JWA."DSA": Custom extension to JWA, defined below.Only the kty, kid, and RSA/DSA-specific parameters are used.
Identity Providers are strongly urged to define kid values for their keys.
As per JWS, all trailing “=” characters are omitted from base64url encoded values.
JWKs can represent DSA keys. In this case, the kty member value MUST be DSA.
The following members MUST be present for DSA public keys.
The p (prime modulus) member contains the larger prime modulus value for the DSA public key. It is represented as the base64url encoding of the value’s unsigned big endian representation as an octet sequence. The octet sequence MUST utilize the minimum number of octets to represent the value.
The q (prime modulus) member contains the smaller prime modulus value for the DSA public key. It is represented as the base64url encoding of the value’s unsigned big endian representation as an octet sequence. The octet sequence MUST utilize the minimum number of octets to represent the value.
The g (generator) member contains the generator value for the DSA public key. It is represented as the base64url encoding of the value’s unsigned big endian representation as an octet sequence. The octet sequence MUST utilize the minimum number of octets to represent the value.
The y (public group element) contains the public group element of the DSA public key, a positive integer between 1 and p, exclusive. It is represented as the base64url encoding of the value’s unsigned big endian representation as an octet sequence. The octet sequence MUST utilize the minimum number of octets to represent the value.
The x (private exponent) member contains the private exponent value for the DSA private key, a positive integer between 0 and q, exclusive. It is represented as the base64url encoding of the value’s unsigned big endian representation as an octet sequence. The octet sequence MUST utilize the minimum number of octets to represent the value.