No Way Jose! Cryptography & Encryption - JS Monthly London - January 2021

Sam Bellen - No way Jose Is your first thought when thinking about cryptography, “nope, that’s not for me!”? There’s no need to. When explained with simple examples, you can see the basics are not that complicated. The JavaScript Object Signing and Encryption, or JOSE for short is a framework that helps us deal with encryption. It describes ways to securely transfer data either signed (JWS) or encrypted (JWE). Let’s take a leap of faith and explore the wonderful world of cryptography together, shall we? Chapters / Excerpts: Introduction [00:00:00] About Sam [00:00:38 What is Hashing? [00:02:31] A hashing algorithm is a mathematical algorithm that maps data of an arbitrary size to bit string of a fixed size, which basically means that no matter how big the input you give to this algorithm, the output will always be of the same size and that size is depending on the algorithm. Hashing Algorithm [00:03:11] It's a one way function. Keyed Hashing [00:03:49 Keyed Hashing Algorithm [00:04:19] Secret Key [00:05:08] Salted Key Hash [00:06:25] Signing and Digital Signatures [00:07:35] Cryptographic Non-Repudiation [00:09:06] Signing & Verifying Algorithm [00:10:12] RSA Keys [00:11:35] Elliptic Curve Keys [00:12:03] Edwards Curve Octet Keys [00:12:21] Encryption [00:12:44] Symmetric & Asymmetric Encryption [00:13:29] Generating Keys [00:16:24] Using a private key to decrypt [00:19:17 RSA Demo [00:20:47] Jose [00:21:37] JSON Web Keys [00:22:31] JSON Web Signature [00:23:32] Jose Header [00:23:55] A JSON Web Token can be JWS or a JWE [00:29:34] Summary [00:30:25] Q&A [00:31:38] _________________________________________________________________ About Pusher Sessions: We're bringing the meetup to you. With Sessions, you can watch recordings of top-notch talks from developer meetups -- wherever and whenever you want. Meetups are a great way to learn from our peers and to keep up with the latest trends and technologies. As developers ourselves, we at Pusher wanted to bring this great content to more people... So we built Sessions. On Sessions, you can watch talks that interest you and subscribe to be notified when new content gets added. If you run a meetup and want to get involved, kindly get in touch. _________________________________________________________________ About Pusher: Pusher is a hosted service with APIs, developer tools and open source libraries that greatly simplify integrating real-time functionality into web and mobile applications. Pusher will automatically scale when required, removing all the pain of setting up and maintaining a secure, real-time infrastructure. Pusher is already trusted to do so by thousands of developers and companies like GitHub, MailChimp, the Financial Times, Buffer and many more. Getting started takes just a few seconds: simply go to pusher.com and create a free account. Happy hacking!