Sample code for 30+ languages & platforms
Node.js

Set JWE Additional Authenticated Data from BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAadBd, which sets external Additional Authenticated Data (AAD) to the exact bytes held in a BinData.

Background. AAD is integrity-protected but not encrypted. Passing an empty BinData clears any previously configured AAD.

Chilkat Node.js Downloads

Node.js
NODEJS_PRELUDE

function chilkatExample() {

    var success = false;

    var jwe = new chilkat.Jwe();

    //  Protected header: AES key-wrap with AES-256-GCM content encryption.
    var header = new chilkat.JsonObject();
    header.UpdateString("alg","A256KW");
    header.UpdateString("enc","A256GCM");
    success = jwe.SetProtectedHeader(header);
    if (success == false) {
        console.log(jwe.LastErrorText);
        return;
    }

    //  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
    //  secure source rather than hard-coding it.
    var base64Key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
    success = jwe.SetWrappingKey(0,base64Key,"base64");
    if (success == false) {
        console.log(jwe.LastErrorText);
        return;
    }

    //  Set external Additional Authenticated Data (AAD) to the exact bytes in a BinData.  Passing an empty
    //  BinData clears any previously configured AAD.
    var bdAad = new chilkat.BinData();
    bdAad.AppendString("context-info-v1","utf-8");
    success = jwe.SetAadBd(bdAad);
    if (success == false) {
        console.log(jwe.LastErrorText);
        return;
    }

    var sbContent = new chilkat.StringBuilder();
    sbContent.Append("This is the secret content.");
    var sbJwe = new chilkat.StringBuilder();
    success = jwe.EncryptSb(sbContent,"utf-8",sbJwe);
    if (success == false) {
        console.log(jwe.LastErrorText);
        return;
    }

    console.log(sbJwe.GetAsString());

}

chilkatExample();