[ac2u]

Could this be combined with JSON Web Tokens as a hybrid implementation that would be compatible with existing JWT/HMAC libraries?

[tkuhn]

I cannot really answer this, as I am not familiar at all with JWT/HMAC...