Zig
Zig
Encrypt Binary Content to a JWE
See more JSON Web Encryption (JWE) Examples
Demonstrates Jwe.EncryptBd, which encrypts binary content held in a BinData and writes the resulting JWE into a StringBuilder.
Background. JWE (JSON Web Encryption) protects content with a content-encryption algorithm (the header
enc value) while the content-encryption key is managed by the key-management algorithm (the header alg value). This example uses AES key wrapping with a symmetric wrapping key.Chilkat Zig Downloads
const std = @import("std");
const chilkat = @import("chilkat");
pub fn main(init: std.process.Init) !void {
const alloc = init.arena.allocator();
const jwe = try chilkat.Jwe.init();
defer jwe.deinit();
// Set the JWE protected header, specifying the key-management algorithm (alg) and the content-
// encryption algorithm (enc).
const header = try chilkat.JsonObject.init();
defer header.deinit();
header.updateString("alg", "A256KW") catch {};
header.updateString("enc", "A256GCM") catch {};
jwe.setProtectedHeader(header) catch {
std.debug.print("{s}\n", .{try jwe.getLastErrorText(alloc)});
return;
};
// The 256-bit key-wrapping key (base64) for recipient index 0. In production, obtain the key
// from a secure source rather than hard-coding it.
const base64_key = "YWJjZGVmZ2hpamtsbW5vcHFyc3R1dnd4eXowMTIzNDU=";
jwe.setWrappingKey(0, base64_key, "base64") catch {
std.debug.print("{s}\n", .{try jwe.getLastErrorText(alloc)});
return;
};
// Encrypt binary content held in a BinData, writing the resulting JWE into a StringBuilder.
const bd_content = try chilkat.BinData.init();
defer bd_content.deinit();
bd_content.appendString("Binary content to encrypt.", "utf-8") catch {};
const sb_jwe = try chilkat.StringBuilder.init();
defer sb_jwe.deinit();
jwe.encryptBd(bd_content, sb_jwe) catch {
std.debug.print("{s}\n", .{try jwe.getLastErrorText(alloc)});
return;
};
std.debug.print("{s}\n", .{try sb_jwe.getAsString(alloc)});
}