Xbase++

Encrypt a JWE with a Symmetric Wrapping Key

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.SetWrappingKey, which sets the symmetric key-wrapping key for a recipient. The key bytes are supplied in a named encoding such as hex or base64.

Background. AES key wrapping protects the content-encryption key with a shared symmetric key. Both parties must possess the same wrapping key.

Chilkat Xbase++ Downloads

Download Chilkat for Xbase++

Xbase++

LOCAL nSuccess
LOCAL oJwe
LOCAL oHeader
LOCAL cBase64Key
LOCAL cJweCompact

nSuccess := 0

oJwe := CreateObject("Chilkat.Jwe")

//  Protected header: AES key-wrap with AES-256-GCM content encryption.
oHeader := CreateObject("Chilkat.JsonObject")
oHeader:UpdateString("alg", "A256KW")
oHeader:UpdateString("enc", "A256GCM")
nSuccess := oJwe:SetProtectedHeader(oHeader)
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

//  Set the symmetric key-wrapping key for recipient 0.  The key bytes are provided in the named
//  encoding (here base64).  In production, obtain the key from a secure source rather than hard-coding
//  it.
cBase64Key := "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU="
nSuccess := oJwe:SetWrappingKey(0, cBase64Key, "base64")
IF (nSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

cJweCompact := oJwe:Encrypt("This is the secret content.", "utf-8")
IF (oJwe:LastMethodSuccess == 0)
    ? oJwe:LastErrorText
    oJwe:destroy()
    oHeader:destroy()
    RETURN
ENDIF

? cJweCompact

oJwe:destroy()
oHeader:destroy()