- JWT
- A signed or unsigned token containing Base64url-encoded claims; decoding alone does not establish trust.
- HMAC
- A keyed hash that verifies both integrity and possession of a shared secret.
- JWK
- A JSON representation of a cryptographic key and its parameters.
- SRI
- Subresource Integrity: a browser-checked hash for externally loaded scripts or styles.
- TOTP
- A short-lived one-time code derived from a shared secret and the current time.
- PEM / DER
- Common text-armored and binary encodings for certificates and cryptographic keys.
- Fingerprint
- A hash of certificate bytes used as a compact identity check.
- Self-signed
- A certificate signed by its own private key rather than a separate certificate authority.