Signs and verifies PIX (SPI) messages using JSON Web Signature (JWS). PIX is Brazil's instant payment system. Messages are signed with ECDSA (ES256) or RSA (RS256) and transmitted as JWS compact serialization.
Inputs
Tab: Sign a PIX payload or Verify an existing JWS.
Algorithm: JWS signing algorithm.
Private Key: Signing key: ECDSA private key (hex) for ES256, or RSA private key (PEM) for RS256.
KID: Key ID header value — identifies which key was used for signing.
Payload: JSON payload to sign (the PIX message body).
Tips
ES256 (ECDSA P-256) is the primary algorithm for PIX digital signatures.
The JWS compact format is: header.payload.signature (base64url encoded).
KID (Key ID) helps the verifier find the correct public key for verification.