Sample code for 30+ languages & platforms
AutoIt

Set JWE Additional Authenticated Data

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAad, which sets external Additional Authenticated Data (AAD) for a JWE being encrypted, encoding the supplied text with the given charset.

Background. AAD is integrity-protected but not encrypted, binding external context to the ciphertext. The same AAD must be supplied again when decrypting.

Chilkat AutoIt Downloads

AutoIt
Local $bSuccess = False

$oJwe = ObjCreate("Chilkat.Jwe")

;  Protected header: AES key-wrap with AES-256-GCM content encryption.
$oHeader = ObjCreate("Chilkat.JsonObject")
$oHeader.UpdateString("alg","A256KW")
$oHeader.UpdateString("enc","A256GCM")
$bSuccess = $oJwe.SetProtectedHeader($oHeader)
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

;  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
;  secure source rather than hard-coding it.
Local $sBase64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
$bSuccess = $oJwe.SetWrappingKey(0,$sBase64Key,"base64")
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

;  Set external Additional Authenticated Data (AAD).  The AAD is integrity-protected but not
;  encrypted, and must be supplied again when decrypting.
$bSuccess = $oJwe.SetAad("context-info-v1","utf-8")
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

$oSbContent = ObjCreate("Chilkat.StringBuilder")
$oSbContent.Append("This is the secret content.")
$oSbJwe = ObjCreate("Chilkat.StringBuilder")
$bSuccess = $oJwe.EncryptSb($oSbContent,"utf-8",$oSbJwe)
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite($oSbJwe.GetAsString() & @CRLF)