What are various errors related to keys?

[ianbjacobs]

Because encryption is likely to play an important role in this specification, what are the various errors that one might encounter around keys? For example:

• Attempt to fetch a key fails.
• Incorrect key type. (This might be dealt with in the encryption spec.)

Others?

Ian

[stpeter]

Some other possibilities:

• Expired key
• Invalid / malformed key
• Invalid scope/usage (e.g., encrypt-only key used for encrypt-and-sign - this might be your key type error)
• Invalid chain (however I'm not sure if we'll use CA-issued keys)
• Unsupported algorithm
• Mismatched key (wrong intended recipient)

[ianbjacobs]

To look further into, the x5u parameter in JWK:
https://tools.ietf.org/html/rfc7517#section-4.6