Sample code for 30+ languages & platforms
Rust

Set the Shared JWE Unprotected Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetUnprotectedHeader, which sets the shared JWE unprotected header from a JsonObject.

Background. The unprotected header is shared by all recipients but, unlike the protected header, is not integrity-protected. It is carried in the JSON serialization forms of a JWE.

Chilkat Rust Downloads

Rust

let jwe = chilkat::Jwe::new();

// Protected header: AES key-wrap with AES-256-GCM content encryption.
let header = chilkat::JsonObject::new();
let _ = header.update_string("alg", "A256KW");
let _ = header.update_string("enc", "A256GCM");
if jwe.set_protected_header(&header).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
// secure source rather than hard-coding it.
let base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=".to_string();
if jwe.set_wrapping_key(0, &base64_key, "base64").is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// Set the shared JWE unprotected header.  It is shared by all recipients but, unlike the protected
// header, is not integrity-protected.
let unprotected = chilkat::JsonObject::new();
let _ = unprotected.update_string("cty", "text/plain");
if jwe.set_unprotected_header(&unprotected).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

let sb_content = chilkat::StringBuilder::new();
let _ = sb_content.append("This is the secret content.");
let sb_jwe = chilkat::StringBuilder::new();
if jwe.encrypt_sb(&sb_content, "utf-8", &sb_jwe).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

println!("{}", sb_jwe.get_as_string().unwrap_or_default());