Rust
Rust
Set the Shared JWE Unprotected Header
See more JSON Web Encryption (JWE) Examples
Demonstrates Jwe.SetUnprotectedHeader, which sets the shared JWE unprotected header from a JsonObject.
Background. The unprotected header is shared by all recipients but, unlike the protected header, is not integrity-protected. It is carried in the JSON serialization forms of a JWE.
Chilkat Rust Downloads
let jwe = chilkat::Jwe::new();
// Protected header: AES key-wrap with AES-256-GCM content encryption.
let header = chilkat::JsonObject::new();
let _ = header.update_string("alg", "A256KW");
let _ = header.update_string("enc", "A256GCM");
if jwe.set_protected_header(&header).is_err() {
println!("{}", jwe.last_error_text());
return;
}
// The 256-bit key-wrapping key (base64) for recipient index 0. In production, obtain the key from a
// secure source rather than hard-coding it.
let base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=".to_string();
if jwe.set_wrapping_key(0, &base64_key, "base64").is_err() {
println!("{}", jwe.last_error_text());
return;
}
// Set the shared JWE unprotected header. It is shared by all recipients but, unlike the protected
// header, is not integrity-protected.
let unprotected = chilkat::JsonObject::new();
let _ = unprotected.update_string("cty", "text/plain");
if jwe.set_unprotected_header(&unprotected).is_err() {
println!("{}", jwe.last_error_text());
return;
}
let sb_content = chilkat::StringBuilder::new();
let _ = sb_content.append("This is the secret content.");
let sb_jwe = chilkat::StringBuilder::new();
if jwe.encrypt_sb(&sb_content, "utf-8", &sb_jwe).is_err() {
println!("{}", jwe.last_error_text());
return;
}
println!("{}", sb_jwe.get_as_string().unwrap_or_default());