Set JWE Additional Authenticated Data

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAad, which sets external Additional Authenticated Data (AAD) for a JWE being encrypted, encoding the supplied text with the given charset.

let jwe = chilkat::Jwe::new();

// Protected header: AES key-wrap with AES-256-GCM content encryption.
let header = chilkat::JsonObject::new();
let _ = header.update_string("alg", "A256KW");
let _ = header.update_string("enc", "A256GCM");
if jwe.set_protected_header(&header).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
// secure source rather than hard-coding it.
let base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=".to_string();
if jwe.set_wrapping_key(0, &base64_key, "base64").is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// Set external Additional Authenticated Data (AAD).  The AAD is integrity-protected but not
// encrypted, and must be supplied again when decrypting.
if jwe.set_aad("context-info-v1", "utf-8").is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

let sb_content = chilkat::StringBuilder::new();
let _ = sb_content.append("This is the secret content.");
let sb_jwe = chilkat::StringBuilder::new();
if jwe.encrypt_sb(&sb_content, "utf-8", &sb_jwe).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

println!("{}", sb_jwe.get_as_string().unwrap_or_default());