HS256

acronym

cryptographysecurity

Stands for: HMAC with SHA-256 (JWA identifier)

A JWT signing algorithm: HMAC with SHA-256.

HS256 is a JSON Web Algorithm identifier (RFC 7518) for a symmetric HMAC signature using SHA-256. Because signing and verifying use the same shared secret, mixing it up with an asymmetric algorithm like RS256 is the root of a well-known JWT attack.

Also known as: hs256

Sources

RFC 7518 (JSON Web Algorithms)

← All glossary entries