Set JWE Additional Authenticated Data from BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAadBd, which sets external Additional Authenticated Data (AAD) to the exact bytes held in a BinData.

IncludeFile "CkBinData.pb"
IncludeFile "CkStringBuilder.pb"
IncludeFile "CkJwe.pb"
IncludeFile "CkJsonObject.pb"

Procedure ChilkatExample()

    success.i = 0

    jwe.i = CkJwe::ckCreate()
    If jwe.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ;  Protected header: AES key-wrap with AES-256-GCM content encryption.
    header.i = CkJsonObject::ckCreate()
    If header.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckUpdateString(header,"alg","A256KW")
    CkJsonObject::ckUpdateString(header,"enc","A256GCM")
    success = CkJwe::ckSetProtectedHeader(jwe,header)
    If success = 0
        Debug CkJwe::ckLastErrorText(jwe)
        CkJwe::ckDispose(jwe)
        CkJsonObject::ckDispose(header)
        ProcedureReturn
    EndIf

    ;  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
    ;  secure source rather than hard-coding it.
    base64Key.s = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
    success = CkJwe::ckSetWrappingKey(jwe,0,base64Key,"base64")
    If success = 0
        Debug CkJwe::ckLastErrorText(jwe)
        CkJwe::ckDispose(jwe)
        CkJsonObject::ckDispose(header)
        ProcedureReturn
    EndIf

    ;  Set external Additional Authenticated Data (AAD) to the exact bytes in a BinData.  Passing an empty
    ;  BinData clears any previously configured AAD.
    bdAad.i = CkBinData::ckCreate()
    If bdAad.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkBinData::ckAppendString(bdAad,"context-info-v1","utf-8")
    success = CkJwe::ckSetAadBd(jwe,bdAad)
    If success = 0
        Debug CkJwe::ckLastErrorText(jwe)
        CkJwe::ckDispose(jwe)
        CkJsonObject::ckDispose(header)
        CkBinData::ckDispose(bdAad)
        ProcedureReturn
    EndIf

    sbContent.i = CkStringBuilder::ckCreate()
    If sbContent.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkStringBuilder::ckAppend(sbContent,"This is the secret content.")
    sbJwe.i = CkStringBuilder::ckCreate()
    If sbJwe.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkJwe::ckEncryptSb(jwe,sbContent,"utf-8",sbJwe)
    If success = 0
        Debug CkJwe::ckLastErrorText(jwe)
        CkJwe::ckDispose(jwe)
        CkJsonObject::ckDispose(header)
        CkBinData::ckDispose(bdAad)
        CkStringBuilder::ckDispose(sbContent)
        CkStringBuilder::ckDispose(sbJwe)
        ProcedureReturn
    EndIf

    Debug CkStringBuilder::ckGetAsString(sbJwe)


    CkJwe::ckDispose(jwe)
    CkJsonObject::ckDispose(header)
    CkBinData::ckDispose(bdAad)
    CkStringBuilder::ckDispose(sbContent)
    CkStringBuilder::ckDispose(sbJwe)


    ProcedureReturn
EndProcedure