Set JWE Additional Authenticated Data from BinData

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetAadBd, which sets external Additional Authenticated Data (AAD) to the exact bytes held in a BinData.

LOCAL nSuccess
LOCAL oJwe
LOCAL oHeader
LOCAL cBase64Key
LOCAL oBdAad
LOCAL oSbContent
LOCAL oSbJwe

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
oHeader := CreateObject("Chilkat.JsonObject")
oHeader:UpdateString("alg", "A256KW")
oHeader:UpdateString("enc", "A256GCM")
nSuccess := oJwe:SetProtectedHeader(oHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key from a
//  secure source rather than hard-coding it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  Set external Additional Authenticated Data (AAD) to the exact bytes in a BinData.  Passing an empty
//  BinData clears any previously configured AAD.
oBdAad := CreateObject("Chilkat.BinData")
oBdAad:AppendString("context-info-v1", "utf-8")
nSuccess := oJwe:SetAadBd(oBdAad)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oBdAad:destroy()
    RETURN
ENDIF

oSbContent := CreateObject("Chilkat.StringBuilder")
oSbContent:Append("This is the secret content.")
oSbJwe := CreateObject("Chilkat.StringBuilder")
nSuccess := oJwe:EncryptSb(oSbContent, "utf-8", oSbJwe)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    oBdAad:destroy()
    oSbContent:destroy()
    oSbJwe:destroy()
    RETURN
ENDIF

? oSbJwe:GetAsString()

oJwe:destroy()
oHeader:destroy()
oBdAad:destroy()
oSbContent:destroy()
oSbJwe:destroy()