Perl
Chilkat2 Perl
Set JWE Additional Authenticated Data
See more JSON Web Encryption (JWE) Examples
Demonstrates Jwe.SetAad, which sets external Additional Authenticated Data (AAD) for a JWE being encrypted, encoding the supplied text with the given charset.
Background. AAD is integrity-protected but not encrypted, binding external context to the ciphertext. The same AAD must be supplied again when decrypting.
Chilkat Perl Downloads
use strict;
use warnings;
use Chilkat2;
my $jwe = Chilkat2::Jwe->new;
# Protected header: AES key-wrap with AES-256-GCM content encryption.
my $header = Chilkat2::JsonObject->new;
$header->UpdateString('alg', 'A256KW');
$header->UpdateString('enc', 'A256GCM');
my $success = $jwe->SetProtectedHeader($header);
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
# The 256-bit key-wrapping key (base64) for recipient index 0. In production, obtain the key from a
# secure source rather than hard-coding it.
my $base64Key = 'YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=';
$success = $jwe->SetWrappingKey(0, $base64Key, 'base64');
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
# Set external Additional Authenticated Data (AAD). The AAD is integrity-protected but not
# encrypted, and must be supplied again when decrypting.
$success = $jwe->SetAad('context-info-v1', 'utf-8');
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
my $sbContent = Chilkat2::StringBuilder->new;
$sbContent->Append('This is the secret content.');
my $sbJwe = Chilkat2::StringBuilder->new;
$success = $jwe->EncryptSb($sbContent, 'utf-8', $sbJwe);
if (!$success) {
print $jwe->LastErrorText, "\n";
exit;
}
print $sbJwe->GetAsString(), "\n";