Set JWE Additional Authenticated Data from BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAadBd, which sets external Additional Authenticated Data (AAD) to the exact bytes held in a BinData.

Local $bSuccess = False

$oJwe = ObjCreate("Chilkat.Jwe")

;  Protected header: AES key-wrap with AES-256-GCM content encryption.
$oHeader = ObjCreate("Chilkat.JsonObject")
$oHeader.UpdateString("alg","A256KW")
$oHeader.UpdateString("enc","A256GCM")
$bSuccess = $oJwe.SetProtectedHeader($oHeader)
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

;  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
;  secure source rather than hard-coding it.
Local $sBase64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
$bSuccess = $oJwe.SetWrappingKey(0,$sBase64Key,"base64")
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

;  Set external Additional Authenticated Data (AAD) to the exact bytes in a BinData.  Passing an empty
;  BinData clears any previously configured AAD.
$oBdAad = ObjCreate("Chilkat.BinData")
$oBdAad.AppendString("context-info-v1","utf-8")
$bSuccess = $oJwe.SetAadBd($oBdAad)
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

$oSbContent = ObjCreate("Chilkat.StringBuilder")
$oSbContent.Append("This is the secret content.")
$oSbJwe = ObjCreate("Chilkat.StringBuilder")
$bSuccess = $oJwe.EncryptSb($oSbContent,"utf-8",$oSbJwe)
If ($bSuccess = False) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite($oSbJwe.GetAsString() & @CRLF)