square/js-jose

Why are A128KW and A256KW listed as "not recommended"?

gregmac opened this issue · 1 comments

Specifically, the readme states:

  • A128KW (supported, but not recommended for use)
  • A256KW (supported, but not recommended for use)

Why are they not recommended?

(I'm mostly curious because I was trying to figure out the point of A*KW in the first place.)

I put this comment because Adam Langley doesn't recommend using it, except for backward interoperability reasons. See https://boringssl.googlesource.com/boringssl.git/+/93a3dcd57262f5bbd84adaa5565abb14f95d79ae and https://code.google.com/p/chromium/issues/detail?id=396407