lestrrat-go/jwx's malicious parameters in JWE can cause a DOS

too high p2c parameter in JWE's alg PBES2-* could lead to a DOS attack. JWE key management algorithms based on PBKDF2 require a JOSE Header Parameter called p2c (PBES2 Count). If an attacker sets the p2c parameter to a large number, it can cause a lot of computational consumption, resulting in a DOS attack