Hacker GitHub

← All repos

fernet/spec

View on GitHub ↗ ★ 460

Spec and acceptance tests for the Fernet format.

9 mentions on Hacker News by 5 people: 0 stories, 9 comments · first 2017-03-14 · latest 2023-08-22

Mentions per year 9 mentions · busiest year 2017 (3)
20082026
AllStoriesComments NewestTopOldest
  1. https://github.com/fernet/spec/blob/master/Spec.md It's just a simple format specification using standard crypto primitives. > AES in CBC mode with a 128-bit key for encryption; using PKCS7 padding. > HMAC using SHA256 for authentication.
    comment by googlryas · 2023-08-22 · in Have You Ever Heard of the Fernet Encryption Algorithm?
  2. See also Fernet and Branca: https://github.com/fernet/spec/blob/master/Spec.md https://branca.io/
    comment by samwillis · 2022-10-03 · in Paseto is everything you love about JWT without any of the design deficits
  3. …trivia, the name comes from an italian drink from the 19th century named Fernet-Branca [3]. [0] - https://github.com/fernet/spec/blob/master/Spec.md [1] - https://branca.io [2] - https://github.com/paragonie/paseto/tree/master/docs/01-Prot.…
    comment by rvz · 2020-02-18 · in JWT is Awesome
  4. …tokens look much more like a saner alternative for replacing JWTs. [0] - https://paseto.io [1] - https://github.com/fernet/spec [2] - https://branca.io
    comment by rvz · 2019-11-25 · in Understand JWT in 3 Minutes
  5. …more better alternative for JWTs. If not, then the good old session cookie may suffice even. [0] - https://github.com/fernet/spec [1] - https://paseto.io [2] - https://branca.io
    comment by rvz · 2019-08-22 · in JWTs suck (for web auth and basically everything else)
  6. …Branca [1] or Fernet [2] Tokens at this point. [0] https://paseto.io/ [1] https://branca.io/ [2] https://github.com/fernet/spec/
    comment by rvz · 2019-07-01 · in Free (Almost) JWT eBook
  7. …that doesn't provide all the features of JWT, but provides better security: Fernet or Macaroons. https://github.com/fernet/spec/blob/master/Spec.md https://github.com/rescrv/libmacaroons You'll need to implement claim validation and expiry…
    comment by unscaled · 2017-07-09 · in API Security Checklist for developers
  8. Sure: use Fernet. https://github.com/fernet/spec/blob/master/Spec.md It's an informal standard, like Noise, or WireGuard, or Curve25519, or Nacl. It's also so simple that JWT nerds will likely believe it's missing something. It is: the…
    comment by tptacek · 2017-03-14 · in JSON Web Tokens should be avoided
  9. Or just use Fernet: https://github.com/fernet/spec/blob/master/Spec.md Fernet was written originally for Python but there's a Ruby implementation, a Golang implementation, and a Clojure implementation. I believe that for at least 80% of…
    comment by tptacek · 2017-03-14 · in JSON Web Tokens should be avoided