Encrypt a JWE with a Password (PBES2)

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetPassword, which sets the PBES2 password for a recipient. The example uses PBES2-HS256+A128KW key management with AES-128-GCM content encryption.

#include <C_CkJwe.h>
#include <C_CkJsonObject.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkJwe jwe;
    HCkJsonObject header;
    const char *password;
    const char *jweCompact;

    success = FALSE;

    jwe = CkJwe_Create();

    //  Protected header: PBES2 password-based key management with AES-128-GCM content encryption.
    header = CkJsonObject_Create();
    CkJsonObject_UpdateString(header,"alg","PBES2-HS256+A128KW");
    CkJsonObject_UpdateString(header,"enc","A128GCM");
    success = CkJwe_SetProtectedHeader(jwe,header);
    if (success == FALSE) {
        printf("%s\n",CkJwe_lastErrorText(jwe));
        CkJwe_Dispose(jwe);
        CkJsonObject_Dispose(header);
        return;
    }

    //  Set the PBES2 password for recipient 0.  The password should come from a secure source rather than
    //  being hard-coded.
    password = "myPassword";
    success = CkJwe_SetPassword(jwe,0,password);
    if (success == FALSE) {
        printf("%s\n",CkJwe_lastErrorText(jwe));
        CkJwe_Dispose(jwe);
        CkJsonObject_Dispose(header);
        return;
    }

    jweCompact = CkJwe_encrypt(jwe,"This is the secret content.","utf-8");
    if (CkJwe_getLastMethodSuccess(jwe) == FALSE) {
        printf("%s\n",CkJwe_lastErrorText(jwe));
        CkJwe_Dispose(jwe);
        CkJsonObject_Dispose(header);
        return;
    }

    printf("%s\n",jweCompact);


    CkJwe_Dispose(jwe);
    CkJsonObject_Dispose(header);

    }