Technical dictionary
JWT (JSON Web Token)
Compact token format often signed with classical RSA/ECDSA—common in APIs and OIDC.
Definition
JWTs carry claims and are typically integrity-protected with digital signatures (JWS). Verification trusts the issuer’s keys published via JWKS.
Classical signing algorithms are quantum-relevant. Short lifetimes help operationally but do not eliminate CRQC forgery concerns.