Page History

...

One can inline the encrypted key or the key set directly in the configuration properties. For example, here is how an encrypted single JWK key is inlined. Similarly, here is how a an encrypted collection of keys is inlined.

CXF assumes that the JWK keys have been encrypted has been encrypted if a password provider is available in scope, it is typically registered with JAX-RS endpoints. The encryption is done with a password based PBES2 algorithm. 

...