Sample code for 30+ languages & platforms
Tcl

Set the Shared JWE Unprotected Header

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetUnprotectedHeader, which sets the shared JWE unprotected header from a JsonObject.

Background. The unprotected header is shared by all recipients but, unlike the protected header, is not integrity-protected. It is carried in the JSON serialization forms of a JWE.

Chilkat Tcl Downloads

Tcl

load ./chilkat.dll

set success 0

set jwe [new_CkJwe]

#  Protected header: AES key-wrap with AES-256-GCM content encryption.
set header [new_CkJsonObject]

CkJsonObject_UpdateString $header "alg" "A256KW"
CkJsonObject_UpdateString $header "enc" "A256GCM"
set success [CkJwe_SetProtectedHeader $jwe $header]
if {$success == 0} then {
    puts [CkJwe_lastErrorText $jwe]
    delete_CkJwe $jwe
    delete_CkJsonObject $header
    exit
}

#  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
#  secure source rather than hard-coding it.
set base64Key "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
set success [CkJwe_SetWrappingKey $jwe 0 $base64Key "base64"]
if {$success == 0} then {
    puts [CkJwe_lastErrorText $jwe]
    delete_CkJwe $jwe
    delete_CkJsonObject $header
    exit
}

#  Set the shared JWE unprotected header.  It is shared by all recipients but, unlike the protected
#  header, is not integrity-protected.
set unprotected [new_CkJsonObject]

CkJsonObject_UpdateString $unprotected "cty" "text/plain"
set success [CkJwe_SetUnprotectedHeader $jwe $unprotected]
if {$success == 0} then {
    puts [CkJwe_lastErrorText $jwe]
    delete_CkJwe $jwe
    delete_CkJsonObject $header
    delete_CkJsonObject $unprotected
    exit
}

set sbContent [new_CkStringBuilder]

CkStringBuilder_Append $sbContent "This is the secret content."
set sbJwe [new_CkStringBuilder]

set success [CkJwe_EncryptSb $jwe $sbContent "utf-8" $sbJwe]
if {$success == 0} then {
    puts [CkJwe_lastErrorText $jwe]
    delete_CkJwe $jwe
    delete_CkJsonObject $header
    delete_CkJsonObject $unprotected
    delete_CkStringBuilder $sbContent
    delete_CkStringBuilder $sbJwe
    exit
}

puts [CkStringBuilder_getAsString $sbJwe]

delete_CkJwe $jwe
delete_CkJsonObject $header
delete_CkJsonObject $unprotected
delete_CkStringBuilder $sbContent
delete_CkStringBuilder $sbJwe