Go

JWE using ECDH-ES+A256KW

See more JSON Web Encryption (JWE) Examples

Create a JWE with the following public/private key pair:

{
    "kty": "EC",
    "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
    "use": "enc",
    "crv": "P-256",
    "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
    "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
    "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
    "alg": "ECDH-ES+A256KW"
}

Also shows how to decrypt.

Go

    success := false

    // This requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Create the following JSON:
    // {
    //     "kty": "EC",
    //     "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
    //     "use": "enc",
    //     "crv": "P-256",
    //     "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
    //     "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
    //     "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
    //     "alg": "ECDH-ES+A256KW"
    // }

    json := chilkat.NewJsonObject()
    json.UpdateString("kty","EC")
    json.UpdateString("d","jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c")
    json.UpdateString("use","enc")
    json.UpdateString("crv","P-256")
    json.UpdateString("kid","evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs")
    json.UpdateString("x","LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM")
    json.UpdateString("y","voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4")
    json.UpdateString("alg","ECDH-ES+A256KW")

    pubkey := chilkat.NewPublicKey()

    success = pubkey.LoadFromString(*json.Emit())
    if success == false {
        fmt.Println(pubkey.LastErrorText())
        json.DisposeJsonObject()
        pubkey.DisposePublicKey()
        return
    }

    // Build our protected header:

    // 	{
    // 	  "alg": "ECDH-ES+A256KW",
    // 	  "enc": "A256GCM",
    // 	  "exp": 1621957030,
    // 	  "cty": "NJWT",
    // 	  "epk": {
    // 	    "kty": "EC",
    // 	    "x": "QLpJ_LpFx-6yJhsb4OvHwU1khLnviiOwYOvmf5clK7w"
    // 	    "y": "AJh7pJ3zZKDJkm8rbeG69GBooTosXJgSsvNFH0i3Vxnu"
    // 	    "crv": "BP-256"
    // 	  }
    // 	}

    // Use jwt only for getting the current date/time + 3600 seconds.
    jwt := chilkat.NewJwt()

    jweProtHdr := chilkat.NewJsonObject()
    jweProtHdr.UpdateString("alg","ECDH-ES+A256KW")
    jweProtHdr.UpdateString("enc","A256GCM")
    jweProtHdr.UpdateInt("exp",*jwt.GenNumericDate(3600))
    jweProtHdr.UpdateString("cty","NJWT")
    jweProtHdr.UpdateString("epk.kty","EC")
    jweProtHdr.UpdateString("epk.x","LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM")
    jweProtHdr.UpdateString("epk.y","voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4")
    jweProtHdr.UpdateString("epk.crv","P-256")

    jwe := chilkat.NewJwe()
    jwe.SetProtectedHeader(jweProtHdr)
    jwe.SetPublicKey(0,pubkey)

    plainText := "This is the text to be encrypted."
    strJwe := jwe.Encrypt(plainText,"utf-8")
    if jwe.LastMethodSuccess() != true {
        fmt.Println(jwe.LastErrorText())
        json.DisposeJsonObject()
        pubkey.DisposePublicKey()
        jwt.DisposeJwt()
        jweProtHdr.DisposeJsonObject()
        jwe.DisposeJwe()
        return
    }

    fmt.Println(*strJwe)

    // Let's decrypt...
    privkey := chilkat.NewPrivateKey()

    success = privkey.LoadJwk(*json.Emit())
    if success == false {
        fmt.Println(privkey.LastErrorText())
        json.DisposeJsonObject()
        pubkey.DisposePublicKey()
        jwt.DisposeJwt()
        jweProtHdr.DisposeJsonObject()
        jwe.DisposeJwe()
        privkey.DisposePrivateKey()
        return
    }

    jwe2 := chilkat.NewJwe()
    success = jwe2.LoadJwe(*strJwe)
    if success == false {
        fmt.Println(jwe2.LastErrorText())
        json.DisposeJsonObject()
        pubkey.DisposePublicKey()
        jwt.DisposeJwt()
        jweProtHdr.DisposeJsonObject()
        jwe.DisposeJwe()
        privkey.DisposePrivateKey()
        jwe2.DisposeJwe()
        return
    }

    jwe2.SetPrivateKey(0,privkey)

    //  Decrypt.
    decryptedText := jwe2.Decrypt(0,"utf-8")
    if jwe2.LastMethodSuccess() != true {
        fmt.Println(jwe2.LastErrorText())
        json.DisposeJsonObject()
        pubkey.DisposePublicKey()
        jwt.DisposeJwt()
        jweProtHdr.DisposeJsonObject()
        jwe.DisposeJwe()
        privkey.DisposePrivateKey()
        jwe2.DisposeJwe()
        return
    }

    fmt.Println(*decryptedText)

    json.DisposeJsonObject()
    pubkey.DisposePublicKey()
    jwt.DisposeJwt()
    jweProtHdr.DisposeJsonObject()
    jwe.DisposeJwe()
    privkey.DisposePrivateKey()
    jwe2.DisposeJwe()