Set JWE Additional Authenticated Data from BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAadBd, which sets external Additional Authenticated Data (AAD) to the exact bytes held in a BinData.

LOCAL lnSuccess
LOCAL loJwe
LOCAL loHeader
LOCAL lcBase64Key
LOCAL loBdAad
LOCAL loSbContent
LOCAL loSbJwe

lnSuccess = 0

loJwe = CreateObject('Chilkat.Jwe')

*  Protected header: AES key-wrap with AES-256-GCM content encryption.
loHeader = CreateObject('Chilkat.JsonObject')
loHeader.UpdateString("alg","A256KW")
loHeader.UpdateString("enc","A256GCM")
lnSuccess = loJwe.SetProtectedHeader(loHeader)
IF (lnSuccess = 0) THEN
    ? loJwe.LastErrorText
    RELEASE loJwe
    RELEASE loHeader
    CANCEL
ENDIF

*  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
*  secure source rather than hard-coding it.
lcBase64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
lnSuccess = loJwe.SetWrappingKey(0,lcBase64Key,"base64")
IF (lnSuccess = 0) THEN
    ? loJwe.LastErrorText
    RELEASE loJwe
    RELEASE loHeader
    CANCEL
ENDIF

*  Set external Additional Authenticated Data (AAD) to the exact bytes in a BinData.  Passing an empty
*  BinData clears any previously configured AAD.
loBdAad = CreateObject('Chilkat.BinData')
loBdAad.AppendString("context-info-v1","utf-8")
lnSuccess = loJwe.SetAadBd(loBdAad)
IF (lnSuccess = 0) THEN
    ? loJwe.LastErrorText
    RELEASE loJwe
    RELEASE loHeader
    RELEASE loBdAad
    CANCEL
ENDIF

loSbContent = CreateObject('Chilkat.StringBuilder')
loSbContent.Append("This is the secret content.")
loSbJwe = CreateObject('Chilkat.StringBuilder')
lnSuccess = loJwe.EncryptSb(loSbContent,"utf-8",loSbJwe)
IF (lnSuccess = 0) THEN
    ? loJwe.LastErrorText
    RELEASE loJwe
    RELEASE loHeader
    RELEASE loBdAad
    RELEASE loSbContent
    RELEASE loSbJwe
    CANCEL
ENDIF

? loSbJwe.GetAsString()

RELEASE loJwe
RELEASE loHeader
RELEASE loBdAad
RELEASE loSbContent
RELEASE loSbJwe