Encrypt a JWE with a Recipient Public Key

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetPublicKey, which sets the public key used to encrypt for a recipient. The example uses RSA-OAEP-256 key management with AES-256-GCM content encryption.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

var
success: Boolean;
jwe: HCkJwe;
header: HCkJsonObject;
pubKey: HCkPublicKey;
jweCompact: PWideChar;

begin
success := False;

jwe := CkJwe_Create();

//  Protected header: RSA-OAEP-256 key management with AES-256-GCM content encryption.
header := CkJsonObject_Create();
CkJsonObject_UpdateString(header,'alg','RSA-OAEP-256');
CkJsonObject_UpdateString(header,'enc','A256GCM');
success := CkJwe_SetProtectedHeader(jwe,header);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  Load the recipient's public key.
pubKey := CkPublicKey_Create();
success := CkPublicKey_LoadFromFile(pubKey,'qa_data/recipient_pubkey.pem');
if (success = False) then
  begin
    Memo1.Lines.Add(CkPublicKey__lastErrorText(pubKey));
    Exit;
  end;

//  Set the public key used to encrypt for recipient 0.
success := CkJwe_SetPublicKey(jwe,0,pubKey);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

jweCompact := CkJwe__encrypt(jwe,'This is the secret content.','utf-8');
if (CkJwe_getLastMethodSuccess(jwe) = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;
Memo1.Lines.Add(jweCompact);

CkJwe_Dispose(jwe);
CkJsonObject_Dispose(header);
CkPublicKey_Dispose(pubKey);