Encrypt Content to a JWE

See more JSON Web Encryption (JWE) Examples

Demonstrates Jwe.Encrypt, which encrypts a string and returns the resulting JWE. The charset argument converts the text to bytes before encryption.

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    const jwe = try chilkat.Jwe.init();
    defer jwe.deinit();

    // Set the JWE protected header, specifying the key-management algorithm (alg) and the content-
    // encryption algorithm (enc).
    const header = try chilkat.JsonObject.init();
    defer header.deinit();
    header.updateString("alg", "A256KW") catch {};
    header.updateString("enc", "A256GCM") catch {};
    jwe.setProtectedHeader(header) catch {
        std.debug.print("{s}\n", .{try jwe.getLastErrorText(alloc)});
        return;
    };

    // The 256-bit key-wrapping key (base64) for recipient index 0.  In production, obtain the key
    // from a secure source rather than hard-coding it.
    const base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
    jwe.setWrappingKey(0, base64_key, "base64") catch {
        std.debug.print("{s}\n", .{try jwe.getLastErrorText(alloc)});
        return;
    };

    // Encrypt the content.  The 2nd argument is the charset used to convert the text to bytes.  The
    // returned string is the JWE (compact serialization by default).
    const jwe_compact = jwe.encrypt(alloc, "This is the secret content.", "utf-8") catch {
        std.debug.print("{s}\n", .{try jwe.getLastErrorText(alloc)});
        return;
    };

    std.debug.print("{s}\n", .{jwe_compact});
}