(JavaScript) JWE using A256GCMKW

This example demonstrates creating a JCE with AES GCM key wrap.

Note

This example is intended for running within a Chilkat.Js embedded JavaScript engine. All Chilkat JavaScript examples require Chilkat v11.4.0 or greater.

var success = false;

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

var plaintext = "My text to enrypt";

var jwe = new CkJwe();

// First build the JWE Protected Header: 

//         {
//             "alg": "A256GCMKW",
//             "kid": "18ec08e1-bfa9-4d95-b205-2b4dd1d4321d",
//             "tag": "kfPduVQ3T3H6vnewt--ksw",
//             "iv": "KkYT0GX_2jHlfqN_",
//             "enc": "A128CBC-HS256"
//         }

var jweProtHdr = new CkJsonObject();
jweProtHdr.AppendString("alg","A256GCMKW");
// kid is optional
jweProtHdr.AppendString("kid","18ec08e1-bfa9-4d95-b205-2b4dd1d4321d");
// tag is optional
jweProtHdr.AppendString("tag","kfPduVQ3T3H6vnewt--ksw");
jweProtHdr.AppendString("enc","A256GCM");
// the iv should be 16 random chars.
var prng = new CkPrng();
jweProtHdr.AppendString("iv",prng.RandomString(16,true,true,true));
jwe.SetProtectedHeader(jweProtHdr);

console.log("JWE Protected Header: " + jweProtHdr.Emit());
console.log("--");

// Given that we have 256-bit AES, our key should be 32 bytes.
// The ascii string here is 32 bytes, therefore the 2nd arg is "ascii" to use these
// ascii chars directly as the key.
var aesWrappingKey = "2baf4f730f5e4542b428593ef9cceb0e";
jwe.SetWrappingKey(0,aesWrappingKey,"ascii");

// Encrypt and return the JWE:
var strJwe = jwe.Encrypt(plaintext,"utf-8");
if (jwe.LastMethodSuccess !== true) {
    console.log(jwe.LastErrorText);
    return;
}

// Show the JWE we just created:
console.log(strJwe);

// Decrypt the JWE that was just produced.
// 1) Load the JWE.
// 2) Set the AES wrapping key.
// 3) Decrypt.
var jwe2 = new CkJwe();
success = jwe2.LoadJwe(strJwe);
if (success !== true) {
    console.log(jwe2.LastErrorText);
    return;
}

// Set the AES wrap key.  Important to use "ascii"
jwe2.SetWrappingKey(0,aesWrappingKey,"ascii");

// Decrypt.
var originalPlaintext = jwe2.Decrypt(0,"utf-8");
if (jwe2.LastMethodSuccess !== true) {
    console.log(jwe2.LastErrorText);
    return;
}

console.log("original text: ");
console.log(originalPlaintext);