Review_comments

Author: IsmathBadsha

posts/2025-09-09-25.0.0.9.adoc

@@ -1,17 +1,17 @@
 ---
 layout: post
-title: "ECDH-ES support added to JwtBuilder in 25.0.0.9"
+title: "ECDH-ES support added to JWT Builder in 25.0.0.9"
 # Do NOT change the categories section
 categories: blog
 author_picture: https://avatars3.githubusercontent.com/IsmathBadsha
 author_github: https://github.com/IsmathBadsha
-seo-title: ECDH-ES support added to JwtBuilder in 25.0.0.9 - OpenLiberty.io
-seo-description: 'This release introduces ECDH-ES support in JwtBuilder as a key management algorithm, offering a more secure alternative to RSA-OAEP.'
-blog_description: 'This release introduces ECDH-ES support in JwtBuilder as a key management algorithm, offering a more secure alternative to RSA-OAEP.'
+seo-title: ECDH-ES support added to JWT Builder in 25.0.0.9 - OpenLiberty.io
+seo-description: 'This release introduces ECDH-ES support in JWT Builder as a key management algorithm, offering a more secure alternative to RSA-OAEP.'
+blog_description: 'This release introduces ECDH-ES support in JWT Builder as a key management algorithm, offering a more secure alternative to RSA-OAEP.'
 open-graph-image: https://openliberty.io/img/twitter_card.jpg
 open-graph-image-alt: Open Liberty Logo
 ---
-= ECDH-ES support added to JwtBuilder in 25.0.0.9
+= ECDH-ES support added to JWT Builder in 25.0.0.9
 Ismath Badsha <https://github.com/IsmathBadsha>
 :imagesdir: /s
 :url-prefix:
@@ -49,7 +49,7 @@ Ismath Badsha <https://github.com/IsmathBadsha>
 // change the "IMAGE CAPTION" to a couple words of what the image is
 // // // // // // // //
 
-This release introduces ECDH-ES support in JwtBuilder as a key management algorithm, offering a more secure alternative to RSA-OAEP.
+This release introduces ECDH-ES support in JWT Builder as a key management algorithm, offering a more secure alternative to RSA-OAEP.
 
 // // // // // // // //
 // In the preceding section:
@@ -66,7 +66,7 @@ This release introduces ECDH-ES support in JwtBuilder as a key management algori
 
 In link:{url-about}[Open Liberty] 25.0.0.9:
 
-* <<ECDH_ES, Add ECDH-ES support to JwtBuilder>>
+* <<ECDH_ES, Add ECDH-ES support to JWT Builder>>
 * <<CVEs, Security Vulnerability (CVE) Fixes>>
 * <<bugs, Notable bug fixes>>
 
@@ -156,11 +156,11 @@ image::img/blog/blog_btn_stack.svg[Ask a question on Stack Overflow, align="cent
 // Contact/Reviewer: tloodu
 // // // // // // // // 
 [#ECDH_ES]
-== Add ECDH-ES support to JwtBuilder
+== Add ECDH-ES support to JWT Builder
 
-Open Liberty has enhanced its JSON Web Token 1.0 (`jwt-1.0`) feature by introducing support for ECDH-ES (Elliptic Curve Diffie-Hellman Ephemeral Static) as a key management algorithm in the JwtBuilder configuration. This update allows application developers to use Elliptic Curve Cryptography for encrypting the Content Encryption Key (CEK) of a JWE, providing a modern alternative to the previously supported RSA-OAEP with enhanced security. 
+Open Liberty has enhanced its JSON Web Token 1.0 (`jwt-1.0`) feature by introducing support for ECDH-ES (Elliptic Curve Diffie-Hellman Ephemeral Static) as a key management algorithm in the JWT Builder configuration. This update allows application developers to use Elliptic Curve (EC)Cryptography to determine the Content Encryption Key (CEK) of a JSON Web Encryption (JWE) token, providing a modern alternative to the previously supported RSA-OAEP with enhanced security. 
 
-To use ECDH-ES, developers must define an Elliptic Curve public key in the `keyManagementKeyAlias` attribute. The EC public and private key pair can be generated using securityUtility or keytool, for example:
+To use ECDH-ES, developers must define an Elliptic Curve (EC) public key in the `keyManagementKeyAlias` attribute. The EC public and private key pair can be generated using securityUtility or keytool, for example:
 
 ----
 ./securityUtility createSSLCertificate --sigAlg=SHA256withECDSA --keySize=256 --server=myServer --validity=3650 --password=password
@@ -170,7 +170,7 @@ To use ECDH-ES, developers must define an Elliptic Curve public key in the `keyM
 keytool -genkeypair -alias eccert -keyalg EC -groupname secp256r1 -validity 3650 -storetype pkcs12 -keystore myKeystore.p12 -storepass password
 ----
 
-ECDH-ES can be configured under the `keyManagementKeyAlgorithm` attribute in a JwtBuilder element of `JSON Web Token 1.0` (jwt-1.0) feature. The EC public key used for encryption must be referenced by its alias in `keyManagementKeyAlias`, and the keystore must be specified using the `trustStoreRef` attribute.
+ECDH-ES can be configured under the `keyManagementKeyAlgorithm` attribute in aJWT Builder element of `JSON Web Token 1.0` (jwt-1.0) feature. The EC public key used for encryption must be referenced by its alias in `keyManagementKeyAlias`, and the keystore must be specified using the `trustStoreRef` attribute.
 
 Sample server.xml configuration:
 [source, xml]
@@ -181,7 +181,7 @@ Sample server.xml configuration:
     trustStoreRef="myTrustStore" ... />
 ----
 
-For more details on configuring `JwtBuilder` and using ECDH-ES, check the link:https://openliberty.io/docs/latest/reference/config/jwtBuilder.html[Open Liberty documentation].
+For more details on configuring `JWT Builder`, check the link:https://openliberty.io/docs/latest/reference/config/jwtBuilder.html[Open Liberty documentation].
 
 // DO NOT MODIFY THIS LINE. </GHA-BLOG-TOPIC>