Encrypt a JWE with a Symmetric Wrapping Key

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetWrappingKey, which sets the symmetric key-wrapping key for a recipient. The key bytes are supplied in a named encoding such as hex or base64.

local chilkat = require("chilkat")

local jwe = chilkat.Jwe.new()

-- Protected header: AES key-wrap with AES-256-GCM content encryption.
local header = chilkat.JsonObject.new()
header:update_string("alg", "A256KW")
header:update_string("enc", "A256GCM")
local success = jwe:set_protected_header(header)
if not success then
    print(jwe.last_error_text)
    return
end

-- Set the symmetric key-wrapping key for recipient 0.  The key bytes are provided in the named
-- encoding (here base64).  In production, obtain the key from a secure source rather than hard-coding
-- it.
local base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
success = jwe:set_wrapping_key(0, base64Key, "base64")
if not success then
    print(jwe.last_error_text)
    return
end

local jweCompact = jwe:encrypt("This is the secret content.", "utf-8")
if not jwe.last_method_success then
    print(jwe.last_error_text)
    return
end

print(jweCompact)