AutoIt
AutoIt
Set JWE Additional Authenticated Data
See more JSON Web Encryption (JWE) Examples
Demonstrates Jwe.SetAad, which sets external Additional Authenticated Data (AAD) for a JWE being encrypted, encoding the supplied text with the given charset.
Background. AAD is integrity-protected but not encrypted, binding external context to the ciphertext. The same AAD must be supplied again when decrypting.
Chilkat AutoIt Downloads
Local $bSuccess = False
$oJwe = ObjCreate("Chilkat.Jwe")
; Protected header: AES key-wrap with AES-256-GCM content encryption.
$oHeader = ObjCreate("Chilkat.JsonObject")
$oHeader.UpdateString("alg","A256KW")
$oHeader.UpdateString("enc","A256GCM")
$bSuccess = $oJwe.SetProtectedHeader($oHeader)
If ($bSuccess = False) Then
ConsoleWrite($oJwe.LastErrorText & @CRLF)
Exit
EndIf
; The 256-bit key-wrapping key (base64) for recipient index 0. In production, obtain the key from a
; secure source rather than hard-coding it.
Local $sBase64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
$bSuccess = $oJwe.SetWrappingKey(0,$sBase64Key,"base64")
If ($bSuccess = False) Then
ConsoleWrite($oJwe.LastErrorText & @CRLF)
Exit
EndIf
; Set external Additional Authenticated Data (AAD). The AAD is integrity-protected but not
; encrypted, and must be supplied again when decrypting.
$bSuccess = $oJwe.SetAad("context-info-v1","utf-8")
If ($bSuccess = False) Then
ConsoleWrite($oJwe.LastErrorText & @CRLF)
Exit
EndIf
$oSbContent = ObjCreate("Chilkat.StringBuilder")
$oSbContent.Append("This is the secret content.")
$oSbJwe = ObjCreate("Chilkat.StringBuilder")
$bSuccess = $oJwe.EncryptSb($oSbContent,"utf-8",$oSbJwe)
If ($bSuccess = False) Then
ConsoleWrite($oJwe.LastErrorText & @CRLF)
Exit
EndIf
ConsoleWrite($oSbJwe.GetAsString() & @CRLF)