Xbase++

Encrypt Content to a JWE

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.Encrypt, which encrypts a string and returns the resulting JWE. The charset argument converts the text to bytes before encryption.

Background. JWE (JSON Web Encryption) protects content with a content-encryption algorithm (the header enc value) while the content-encryption key is managed by the key-management algorithm (the header alg value). This example uses AES key wrapping with a symmetric wrapping key.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oJwe
LOCAL oHeader
LOCAL cBase64Key
LOCAL cJweCompact

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Set the JWE protected header, specifying the key-management algorithm (alg) and the content-
//  encryption algorithm (enc).
oHeader := CreateObject("Chilkat.JsonObject")
oHeader:UpdateString("alg", "A256KW")
oHeader:UpdateString("enc", "A256GCM")
nSuccess := oJwe:SetProtectedHeader(oHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
//  from a secure source rather than hard-coding it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  Encrypt the content.  The 2nd argument is the charset used to convert the text to bytes.  The
//  returned string is the JWE (compact serialization by default).
cJweCompact := oJwe:Encrypt("This is the secret content.", "utf-8")
IF (oJwe:LastMethodSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

? cJweCompact

oJwe:destroy()
oHeader:destroy()