Unicode C

Compute a Private Key's JWK Thumbprint

Demonstrates the Chilkat PrivateKey.GetJwkThumbprint method, which computes the RFC 7638 thumbprint of the key's public portion using a named hash algorithm. The only argument is the hash algorithm (for example sha256).

Note: The file paths are relative to the application's current working directory. Absolute paths may also be used. Supply the paths appropriate to your own environment.

Background: A JWK thumbprint is a stable, canonical hash of a key's public parameters — a short fingerprint that identifies the key independent of formatting. It is widely used as a key ID (kid) in JWK Sets and JWTs, and for comparing whether two representations are the same key. Because it hashes only the public portion, it can be shared freely even though it is computed here from the private key.

Chilkat Unicode C Downloads

Download Chilkat for Unicode C

Unicode C

#include <C_CkPrivateKeyW.h>

void ChilkatSample(void)
    {
    BOOL success;
    HCkPrivateKeyW privKey;
    const wchar_t *thumbprint;

    success = FALSE;

    //  Load a private key to export.
    privKey = CkPrivateKeyW_Create();
    success = CkPrivateKeyW_LoadPemFile(privKey,L"qa_data/private.pem");
    if (success == FALSE) {
        wprintf(L"%s\n",CkPrivateKeyW_lastErrorText(privKey));
        CkPrivateKeyW_Dispose(privKey);
        return;
    }

    //  Compute the RFC 7638 thumbprint of the key's public portion using the named hash algorithm.
    //  Supported values include "sha256", "sha1", "md5", and others.
    thumbprint = CkPrivateKeyW_getJwkThumbprint(privKey,L"sha256");
    if (CkPrivateKeyW_getLastMethodSuccess(privKey) == FALSE) {
        wprintf(L"%s\n",CkPrivateKeyW_lastErrorText(privKey));
        CkPrivateKeyW_Dispose(privKey);
        return;
    }

    wprintf(L"JWK thumbprint: %s\n",thumbprint);


    CkPrivateKeyW_Dispose(privKey);

    }