Objective-C

JWE using ECDH-ES+A256KW

See more JSON Web Encryption (JWE) Examples

Create a JWE with the following public/private key pair:

{
    "kty": "EC",
    "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
    "use": "enc",
    "crv": "P-256",
    "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
    "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
    "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
    "alg": "ECDH-ES+A256KW"
}

Also shows how to decrypt.

Objective-C

#import <CkoJsonObject.h>
#import <CkoPublicKey.h>
#import <CkoJwt.h>
#import <CkoJwe.h>
#import <NSString.h>
#import <CkoPrivateKey.h>

BOOL success = NO;

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Create the following JSON:
//  {
//      "kty": "EC",
//      "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
//      "use": "enc",
//      "crv": "P-256",
//      "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
//      "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
//      "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
//      "alg": "ECDH-ES+A256KW"
//  }

CkoJsonObject *json = [[CkoJsonObject alloc] init];
[json UpdateString: @"kty" value: @"EC"];
[json UpdateString: @"d" value: @"jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c"];
[json UpdateString: @"use" value: @"enc"];
[json UpdateString: @"crv" value: @"P-256"];
[json UpdateString: @"kid" value: @"evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs"];
[json UpdateString: @"x" value: @"LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM"];
[json UpdateString: @"y" value: @"voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4"];
[json UpdateString: @"alg" value: @"ECDH-ES+A256KW"];

CkoPublicKey *pubkey = [[CkoPublicKey alloc] init];

success = [pubkey LoadFromString: [json Emit]];
if (success == NO) {
    NSLog(@"%@",pubkey.LastErrorText);
    return;
}

//  Build our protected header:

//  	{
//  	  "alg": "ECDH-ES+A256KW",
//  	  "enc": "A256GCM",
//  	  "exp": 1621957030,
//  	  "cty": "NJWT",
//  	  "epk": {
//  	    "kty": "EC",
//  	    "x": "QLpJ_LpFx-6yJhsb4OvHwU1khLnviiOwYOvmf5clK7w"
//  	    "y": "AJh7pJ3zZKDJkm8rbeG69GBooTosXJgSsvNFH0i3Vxnu"
//  	    "crv": "BP-256"
//  	  }
//  	}

//  Use jwt only for getting the current date/time + 3600 seconds.
CkoJwt *jwt = [[CkoJwt alloc] init];

CkoJsonObject *jweProtHdr = [[CkoJsonObject alloc] init];
[jweProtHdr UpdateString: @"alg" value: @"ECDH-ES+A256KW"];
[jweProtHdr UpdateString: @"enc" value: @"A256GCM"];
[jweProtHdr UpdateInt: @"exp" value: [jwt GenNumericDate: [NSNumber numberWithInt: 3600]]];
[jweProtHdr UpdateString: @"cty" value: @"NJWT"];
[jweProtHdr UpdateString: @"epk.kty" value: @"EC"];
[jweProtHdr UpdateString: @"epk.x" value: @"LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM"];
[jweProtHdr UpdateString: @"epk.y" value: @"voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4"];
[jweProtHdr UpdateString: @"epk.crv" value: @"P-256"];

CkoJwe *jwe = [[CkoJwe alloc] init];
[jwe SetProtectedHeader: jweProtHdr];
[jwe SetPublicKey: [NSNumber numberWithInt: 0] pubKey: pubkey];

NSString *plainText = @"This is the text to be encrypted.";
NSString *strJwe = [jwe Encrypt: plainText charset: @"utf-8"];
if (jwe.LastMethodSuccess != YES) {
    NSLog(@"%@",jwe.LastErrorText);
    return;
}

NSLog(@"%@",strJwe);

//  Let's decrypt...
CkoPrivateKey *privkey = [[CkoPrivateKey alloc] init];

success = [privkey LoadJwk: [json Emit]];
if (success == NO) {
    NSLog(@"%@",privkey.LastErrorText);
    return;
}

CkoJwe *jwe2 = [[CkoJwe alloc] init];
success = [jwe2 LoadJwe: strJwe];
if (success == NO) {
    NSLog(@"%@",jwe2.LastErrorText);
    return;
}

[jwe2 SetPrivateKey: [NSNumber numberWithInt: 0] privKey: privkey];

//   Decrypt.
NSString *decryptedText = [jwe2 Decrypt: [NSNumber numberWithInt: 0] charset: @"utf-8"];
if (jwe2.LastMethodSuccess != YES) {
    NSLog(@"%@",jwe2.LastErrorText);
    return;
}

NSLog(@"%@",decryptedText);