Objective-C

JWE using A256GCMKW

See more JSON Web Encryption (JWE) Examples

This example demonstrates creating a JCE with AES GCM key wrap. Objective-C

#import <NSString.h>
#import <CkoJwe.h>
#import <CkoJsonObject.h>
#import <CkoPrng.h>

BOOL success = NO;

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

NSString *plaintext = @"My text to enrypt";

CkoJwe *jwe = [[CkoJwe alloc] init];

// First build the JWE Protected Header: 

//         {
//             "alg": "A256GCMKW",
//             "kid": "18ec08e1-bfa9-4d95-b205-2b4dd1d4321d",
//             "tag": "kfPduVQ3T3H6vnewt--ksw",
//             "iv": "KkYT0GX_2jHlfqN_",
//             "enc": "A128CBC-HS256"
//         }

CkoJsonObject *jweProtHdr = [[CkoJsonObject alloc] init];
[jweProtHdr AppendString: @"alg" value: @"A256GCMKW"];
// kid is optional
[jweProtHdr AppendString: @"kid" value: @"18ec08e1-bfa9-4d95-b205-2b4dd1d4321d"];
// tag is optional
[jweProtHdr AppendString: @"tag" value: @"kfPduVQ3T3H6vnewt--ksw"];
[jweProtHdr AppendString: @"enc" value: @"A256GCM"];
// the iv should be 16 random chars.
CkoPrng *prng = [[CkoPrng alloc] init];
[jweProtHdr AppendString: @"iv" value: [prng RandomString: [NSNumber numberWithInt: 16] bDigits: YES bLower: YES bUpper: YES]];
[jwe SetProtectedHeader: jweProtHdr];

NSLog(@"%@%@",@"JWE Protected Header: ",[jweProtHdr Emit]);
NSLog(@"%@",@"--");

// Given that we have 256-bit AES, our key should be 32 bytes.
// The ascii string here is 32 bytes, therefore the 2nd arg is "ascii" to use these
// ascii chars directly as the key.
NSString *aesWrappingKey = @"2baf4f730f5e4542b428593ef9cceb0e";
[jwe SetWrappingKey: [NSNumber numberWithInt: 0] encodedKey: aesWrappingKey encoding: @"ascii"];

// Encrypt and return the JWE:
NSString *strJwe = [jwe Encrypt: plaintext charset: @"utf-8"];
if (jwe.LastMethodSuccess != YES) {
    NSLog(@"%@",jwe.LastErrorText);
    return;
}

// Show the JWE we just created:
NSLog(@"%@",strJwe);

// Decrypt the JWE that was just produced.
// 1) Load the JWE.
// 2) Set the AES wrapping key.
// 3) Decrypt.
CkoJwe *jwe2 = [[CkoJwe alloc] init];
success = [jwe2 LoadJwe: strJwe];
if (success != YES) {
    NSLog(@"%@",jwe2.LastErrorText);
    return;
}

// Set the AES wrap key.  Important to use "ascii"
[jwe2 SetWrappingKey: [NSNumber numberWithInt: 0] encodedKey: aesWrappingKey encoding: @"ascii"];

// Decrypt.
NSString *originalPlaintext = [jwe2 Decrypt: [NSNumber numberWithInt: 0] charset: @"utf-8"];
if (jwe2.LastMethodSuccess != YES) {
    NSLog(@"%@",jwe2.LastErrorText);
    return;
}

NSLog(@"%@",@"original text: ");
NSLog(@"%@",originalPlaintext);