Rust

Encrypt Content to a JWE

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.Encrypt, which encrypts a string and returns the resulting JWE. The charset argument converts the text to bytes before encryption.

Background. JWE (JSON Web Encryption) protects content with a content-encryption algorithm (the header enc value) while the content-encryption key is managed by the key-management algorithm (the header alg value). This example uses AES key wrapping with a symmetric wrapping key.

Chilkat Rust Downloads

Download Chilkat for Rust

Rust


let jwe = chilkat::Jwe::new();

// Set the JWE protected header, specifying the key-management algorithm (alg) and the content-
// encryption algorithm (enc).
let header = chilkat::JsonObject::new();
let _ = header.update_string("alg", "A256KW");
let _ = header.update_string("enc", "A256GCM");
if jwe.set_protected_header(&header).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
// from a secure source rather than hard-coding it.
let base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=".to_string();
if jwe.set_wrapping_key(0, &base64_key, "base64").is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// Encrypt the content.  The 2nd argument is the charset used to convert the text to bytes.  The
// returned string is the JWE (compact serialization by default).
let Ok(jwe_compact) = jwe.encrypt("This is the secret content.", "utf-8") else {
    println!("{}", jwe.last_error_text());
    return;
};

println!("{}", jwe_compact);