AutoIt

JWE using ECDH-ES+A256KW

See more JSON Web Encryption (JWE) Examples

Create a JWE with the following public/private key pair:

{
    "kty": "EC",
    "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
    "use": "enc",
    "crv": "P-256",
    "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
    "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
    "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
    "alg": "ECDH-ES+A256KW"
}

Also shows how to decrypt.

AutoIt

Local $bSuccess = False

; This requires the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

; Create the following JSON:
; {
;     "kty": "EC",
;     "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
;     "use": "enc",
;     "crv": "P-256",
;     "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
;     "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
;     "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
;     "alg": "ECDH-ES+A256KW"
; }

$oJson = ObjCreate("Chilkat.JsonObject")
$oJson.UpdateString("kty","EC")
$oJson.UpdateString("d","jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c")
$oJson.UpdateString("use","enc")
$oJson.UpdateString("crv","P-256")
$oJson.UpdateString("kid","evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs")
$oJson.UpdateString("x","LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM")
$oJson.UpdateString("y","voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4")
$oJson.UpdateString("alg","ECDH-ES+A256KW")

$oPubkey = ObjCreate("Chilkat.PublicKey")

$bSuccess = $oPubkey.LoadFromString($oJson.Emit())
If ($bSuccess = False) Then
    ConsoleWrite($oPubkey.LastErrorText & @CRLF)
    Exit
EndIf

; Build our protected header:

; 	{
; 	  "alg": "ECDH-ES+A256KW",
; 	  "enc": "A256GCM",
; 	  "exp": 1621957030,
; 	  "cty": "NJWT",
; 	  "epk": {
; 	    "kty": "EC",
; 	    "x": "QLpJ_LpFx-6yJhsb4OvHwU1khLnviiOwYOvmf5clK7w"
; 	    "y": "AJh7pJ3zZKDJkm8rbeG69GBooTosXJgSsvNFH0i3Vxnu"
; 	    "crv": "BP-256"
; 	  }
; 	}

; Use jwt only for getting the current date/time + 3600 seconds.
$oJwt = ObjCreate("Chilkat.Jwt")

$oJweProtHdr = ObjCreate("Chilkat.JsonObject")
$oJweProtHdr.UpdateString("alg","ECDH-ES+A256KW")
$oJweProtHdr.UpdateString("enc","A256GCM")
$oJweProtHdr.UpdateInt("exp",$oJwt.GenNumericDate(3600))
$oJweProtHdr.UpdateString("cty","NJWT")
$oJweProtHdr.UpdateString("epk.kty","EC")
$oJweProtHdr.UpdateString("epk.x","LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM")
$oJweProtHdr.UpdateString("epk.y","voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4")
$oJweProtHdr.UpdateString("epk.crv","P-256")

$oJwe = ObjCreate("Chilkat.Jwe")
$oJwe.SetProtectedHeader($oJweProtHdr)
$oJwe.SetPublicKey(0,$oPubkey)

Local $sPlainText = "This is the text to be encrypted."
Local $strJwe = $oJwe.Encrypt($sPlainText,"utf-8")
If ($oJwe.LastMethodSuccess <> True) Then
    ConsoleWrite($oJwe.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite($strJwe & @CRLF)

; Let's decrypt...
$oPrivkey = ObjCreate("Chilkat.PrivateKey")

$bSuccess = $oPrivkey.LoadJwk($oJson.Emit())
If ($bSuccess = False) Then
    ConsoleWrite($oPrivkey.LastErrorText & @CRLF)
    Exit
EndIf

$oJwe2 = ObjCreate("Chilkat.Jwe")
$bSuccess = $oJwe2.LoadJwe($strJwe)
If ($bSuccess = False) Then
    ConsoleWrite($oJwe2.LastErrorText & @CRLF)
    Exit
EndIf

$oJwe2.SetPrivateKey(0,$oPrivkey)

;  Decrypt.
Local $sDecryptedText = $oJwe2.Decrypt(0,"utf-8")
If ($oJwe2.LastMethodSuccess <> True) Then
    ConsoleWrite($oJwe2.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite($sDecryptedText & @CRLF)