- The parameter "kty" MUST be present and set to "EC".
- The parameter "crv" MUST be present and value MUST be one defined in
. - The parameter "x" MUST be present whose value represents the x coordinate of the curve point for the public key. This value MUST be encoded using the procedure defined in
Section 2.1 and MUST be base64url encoded without padding as defined inAppendix C. - The parameter "y" MUST be present whose value represents the y coordinate of the curve point for the public key. This value MUST be encoded using the procedure defined in
Section 2.1 and MUST be base64url encoded without padding as defined inAppendix C. - The parameter "d" MUST be present for private key representations whose value MUST contain the little-endian representation of the private key base64url encoded without padding as defined in
Appendix C. This parameter MUST NOT be present for public keys.

- The parameter "kty" (1) MUST be present and set to "EC2" (2).
- The parameter "crv" (-1) MUST be present and value MUST be one defined in
. - The parameter "x" (-2) MUST be present whose value represents the x coordinate of the curve point for the public key. This value MUST be encoded using the procedure defined in
Section 2.1 and MUST be base64url encoded without padding as defined inAppendix C. - The parameter "y" (-3) Must be present whose value represents the y coordinate of the curve point for the public key. This value MUST be encoded using the procedure defined in
Section 2.1 and MUST be base64url encoded without padding as defined inAppendix C. - The parameter "d" (-4) MUST be present for private key representations whose value MUST contain the little-endian representation of the private key. This parameter MUST NOT be present for public keys.

JWK "crv" value | COSE_Key "crv" value | Description |
---|---|---|

BLS12381G1 | TBD (13 requested) | A cryptographic key on the Barreto-Lynn-Scott (BLS) curve featuring an embedding degree 12 with 381-bit p in the subgroup of G1 defined as E(GF(p)) of order r. The private key will be 32 bytes long. Each of the x and y coordinates of the public key will be 48 bytes long. |

BLS12381G2 | TBD (14 requested) | A cryptographic key on the Barreto-Lynn-Scott (BLS) curve featuring an embedding degree 12 with 381-bit p in the subgroup of G2 defined as E(GF(p^2)) of order r. The private key will be 32 bytes long. Each of the x and y coordinates of the public key will be 96 bytes long. |

BLS48581G1 | TBD (15 requested) | A cryptographic key on the Barreto-Lynn-Scott (BLS) curve featuring an embedding degree 48 with 581-bit p in the subgroup of G1 defined as E(GF(p)) of order r. The private key will be 65 bytes long. Each of the x and y coordinates of the public key will be 73 bytes long. |

BLS48581G2 | TBD (16 requested) | A cryptographic key on the Barreto-Lynn-Scott (BLS) curve featuring an embedding degree 48 with 581-bit p in the subgroup of G2 defined as E(GF(p^8)) of order r. The private key will be 65 bytes long. Each of the x and y coordinates of the public key will be 584 bytes long. |

- Curve Name: BLS12381G1
- Curve Description: 381 bit with an embedding degree of 12 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E(GF(p))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):

- Curve Name: BLS12381G2
- Curve Description: 381 bit with an embedding degree of 12 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E'(GF(p^2))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):

- Curve Name: BLS48581G1
- Curve Description: 581 bit with an embedding degree of 48 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E(GF(p))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):

- Curve Name: BLS48581G2
- Curve Description: 581 bit with an embedding degree of 48 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E'(GF(p^8))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):

- Curve Name: BLS12381G1
- Value: TBD (13 requested)
- Key Type: EC2
- Curve Description: 381 bit with an embedding degree of 12 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E(GF(p))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):
- Recommended: Yes

- Curve Name: BLS12381G2
- Value: TBD (14 requested)
- Key Type: EC2
- Curve Description: 381 bit with an embedding degree of 12 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E'(GF(p^2))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):
- Recommended: Yes

- Curve Name: BLS48581G1
- Value: TBD (15 requested)
- Key Type: EC2
- Curve Description: 581 bit with an embedding degree of 48 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E(GF(p))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):
- Recommended: Yes

- Curve Name: BLS48581G2
- Value: TBD (16 requested)
- Key Type: EC2
- Curve Description: 581 bit with an embedding degree of 48 Barreto- Lynn-Scott pairing-friendly curve using the r-order subgroup of E'(GF(p^8))
- JOSE Implementation Requirements: Optional
- Change Controller: IESG
- Specification Document(s):
- Recommended: Yes

- Replaced instances of "Bls" with "BLS" since B., L., and S. are people's initials, just like "RSA" is three people's initials.

- Changed the key type from OKP to EC/EC2 since these keys use "x" and "y" values.

- Updated references.

- Update COSE_Key and JWK examples.

- Added JWK examples.

- Created draft-ietf-cose-bls-key-representations-00 from draft-looker-cose-bls-key-representations-00 following working group adoption.