Overview (Nimbus JOSE + JWT v. 3.6)

Packages
Package	Description
com.nimbusds.jose	Javascript Object Signing and Encryption (JOSE) classes.
com.nimbusds.jose.crypto	Implementations of selected Javascript Object Signing and Encryption (JOSE) algorithms.
com.nimbusds.jose.jwk	JSON Web Key (JWK) classes.
com.nimbusds.jose.util	Base64, Base64URL, compression and JSON utility classes.
com.nimbusds.jwt	JSON Web Token (JWT) classes.

Nimbus JOSE + JWT

Create, parse and process JOSE and JWT objects:

The library implements all standard JWS algorithms and 6/9 of the JWE algorithms:

JWS algorithms:

HMAC protection: HS256, HS384 and HS512
RSA signatures: RS256, RS384, RS512, PS256, PS384 and PS512.
EC signatures: ES256, ES384 and ES512

JWE key management algorithms:

Key encryption with RSAES-PKCS1-V1_5: RSA1_5
Key encryption with RSAES OAEP: RSA-OAEP and RSA-OAEP-256
Key Encryption with AES key wrap: A128KW, A192KW and A256KW
Key Encryption with AES GCM key wrap: A128CGMKW, A192CGMKW and A256CGMKW
Direct Encryption with a Shared Symmetric Key: dir

JWE content encryption algorithms:

AES_CBC_HMAC_SHA2: A128CBC-HS256, A192CBC-HS384, A256CBC-HS512, the deprecated A128CBC+HS256 and A256CBC+HS512 are also supported
AES GCM: A128GCM, A192GCM and A256GCM

New JWA algorithms can be easily added. A set of interfaces effectively decouple the JOSE / JWT objects from JWA crypto code for signing / verification or encryption / decryption. Multiple JCA providers, including hardware-based are easily supported.

Supported IETF specifications:

[JWA] draft-ietf-jose-json-web-algorithms-39
[JWS] draft-ietf-jose-json-web-signature-39
[JWE] draft-ietf-jose-json-web-encryption-39
[JWK] draft-ietf-jose-json-web-key-39
[JWT] draft-ietf-oauth-json-web-token-32

Dependencies (see the Maven pom.xml for details):

JSON Smart for highly efficient parsing and serialisation of JSON.
JCIP for concurrency annotations.
[optional] The BouncyCastle.org cryptography provider for Java.