Brutkey

cR0w
@cR0w@infosec.exchange

Go hack some Ruby crypto shit.

https://github.com/jwt/ruby-jwe/security/advisories/GHSA-c7p4-hx26-pr73

The authentication tag of encrypted JWEs can be brute forced, which may result in loss of confidentiality for those JWEs and provide ways to craft arbitrary JWEs.