Sample code for 30+ languages & platforms
Rust

Encrypt a JWE with a Symmetric Wrapping Key

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetWrappingKey, which sets the symmetric key-wrapping key for a recipient. The key bytes are supplied in a named encoding such as hex or base64.

Background. AES key wrapping protects the content-encryption key with a shared symmetric key. Both parties must possess the same wrapping key.

Chilkat Rust Downloads

Rust

let jwe = chilkat::Jwe::new();

// Protected header: AES key-wrap with AES-256-GCM content encryption.
let header = chilkat::JsonObject::new();
let _ = header.update_string("alg", "A256KW");
let _ = header.update_string("enc", "A256GCM");
if jwe.set_protected_header(&header).is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

// Set the symmetric key-wrapping key for recipient 0.  The key bytes are provided in the named
// encoding (here base64).  In production, obtain the key from a secure source rather than hard-coding
// it.
let base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=".to_string();
if jwe.set_wrapping_key(0, &base64_key, "base64").is_err() {
    println!("{}", jwe.last_error_text());
    return;
}

let Ok(jwe_compact) = jwe.encrypt("This is the secret content.", "utf-8") else {
    println!("{}", jwe.last_error_text());
    return;
};

println!("{}", jwe_compact);