Encrypt a JWE with a Symmetric Wrapping Key

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetWrappingKey, which sets the symmetric key-wrapping key for a recipient. The key bytes are supplied in a named encoding such as hex or base64.

var
success: Boolean;
jwe: HCkJwe;
header: HCkJsonObject;
base64Key: PWideChar;
jweCompact: PWideChar;

begin
success := False;

jwe := CkJwe_Create();

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
header := CkJsonObject_Create();
CkJsonObject_UpdateString(header,'alg','A256KW');
CkJsonObject_UpdateString(header,'enc','A256GCM');
success := CkJwe_SetProtectedHeader(jwe,header);
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

//  Set the symmetric key-wrapping key for recipient 0.  The key bytes are provided in the named
//  encoding (here base64).  In production, obtain the key from a secure source rather than hard-coding
//  it.
base64Key := 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
success := CkJwe_SetWrappingKey(jwe,0,base64Key,'base64');
if (success = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;

jweCompact := CkJwe__encrypt(jwe,'This is the secret content.','utf-8');
if (CkJwe_getLastMethodSuccess(jwe) = False) then
  begin
    Memo1.Lines.Add(CkJwe__lastErrorText(jwe));
    Exit;
  end;
Memo1.Lines.Add(jweCompact);

CkJwe_Dispose(jwe);
CkJsonObject_Dispose(header);