Section: 13.2.4.9 JOSE profile
Content: SEPPs shall follow the JWE profile defined in TS 33.210[ Network Domain Security (NDS); IP network layer security ]  [3] with the restriction that it shall only use AES GCM with a 128-bit or 256-bit key. The security considerations for the use of AES GCM in section 8.4 of RFC 7518 [59] shall be taken into account. In particular, the same key shall not be used more than 232 times and an IV value shall not be used more than once with the same key. SEPPs and IPXs shall follow the JWS profile as defined in TS 33.210[ Network Domain Security (NDS); IP network layer security ]  [3] with the restriction that they shall only use ES256 algorithm.