JavaScript

Encrypt a JWE with a Recipient Public Key

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetPublicKey, which sets the public key used to encrypt for a recipient. The example uses RSA-OAEP-256 key management with AES-256-GCM content encryption.

The file path is relative to the application's current working directory. An absolute path may also be used. Supply the path appropriate to your own environment.

Background. In public-key JWE, the content-encryption key is wrapped for the recipient using their public key, so only the holder of the matching private key can decrypt.

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

JavaScript

var success = false;

var jwe = new CkJwe();

//  Protected header: RSA-OAEP-256 key management with AES-256-GCM content encryption.
var header = new CkJsonObject();
header.UpdateString("alg","RSA-OAEP-256");
header.UpdateString("enc","A256GCM");
success = jwe.SetProtectedHeader(header);
if (success == false) {
    console.log(jwe.LastErrorText);
    return;
}

//  The file path is relative to the application's current working directory.  An absolute path
//  may also be used.  Supply the path appropriate to your own environment.
//  Load the recipient's public key.
var pubKey = new CkPublicKey();
success = pubKey.LoadFromFile("qa_data/recipient_pubkey.pem");
if (success == false) {
    console.log(pubKey.LastErrorText);
    return;
}

//  Set the public key used to encrypt for recipient 0.
success = jwe.SetPublicKey(0,pubKey);
if (success == false) {
    console.log(jwe.LastErrorText);
    return;
}

var jweCompact = jwe.Encrypt("This is the secret content.","utf-8");
if (jwe.LastMethodSuccess == false) {
    console.log(jwe.LastErrorText);
    return;
}

console.log(jweCompact);