Encrypt Content to a JWE

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.Encrypt, which encrypts a string and returns the resulting JWE. The charset argument converts the text to bytes before encryption.

var
success: Integer;
jwe: TChilkatJwe;
header: TChilkatJsonObject;
base64Key: WideString;
jweCompact: WideString;

begin
success := 0;

jwe := TChilkatJwe.Create(Self);

//  Set the JWE protected header, specifying the key-management algorithm (alg) and the content-
//  encryption algorithm (enc).
header := TChilkatJsonObject.Create(Self);
header.UpdateString('alg','A256KW');
header.UpdateString('enc','A256GCM');
success := jwe.SetProtectedHeader(header.ControlInterface);
if (success = 0) then
  begin
    Memo1.Lines.Add(jwe.LastErrorText);
    Exit;
  end;

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
//  from a secure source rather than hard-coding it.
base64Key := 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
success := jwe.SetWrappingKey(0,base64Key,'base64');
if (success = 0) then
  begin
    Memo1.Lines.Add(jwe.LastErrorText);
    Exit;
  end;

//  Encrypt the content.  The 2nd argument is the charset used to convert the text to bytes.  The
//  returned string is the JWE (compact serialization by default).
jweCompact := jwe.Encrypt('This is the secret content.','utf-8');
if (jwe.LastMethodSuccess = 0) then
  begin
    Memo1.Lines.Add(jwe.LastErrorText);
    Exit;
  end;
Memo1.Lines.Add(jweCompact);