Rust

JWE using ECDH-ES+A256KW

See more JSON Web Encryption (JWE) Examples

Create a JWE with the following public/private key pair:

{
    "kty": "EC",
    "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
    "use": "enc",
    "crv": "P-256",
    "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
    "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
    "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
    "alg": "ECDH-ES+A256KW"
}

Also shows how to decrypt.

Rust

// This requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Create the following JSON:
// {
//     "kty": "EC",
//     "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
//     "use": "enc",
//     "crv": "P-256",
//     "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
//     "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
//     "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
//     "alg": "ECDH-ES+A256KW"
// }

let json = chilkat::JsonObject::new();
let _ = json.update_string("kty", "EC");
let _ = json.update_string("d", "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c");
let _ = json.update_string("use", "enc");
let _ = json.update_string("crv", "P-256");
let _ = json.update_string("kid", "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs");
let _ = json.update_string("x", "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM");
let _ = json.update_string("y", "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4");
let _ = json.update_string("alg", "ECDH-ES+A256KW");

let pubkey = chilkat::PublicKey::new();

if pubkey.load_from_string(&json.emit().unwrap_or_default()).is_err() {
    println!("{}", pubkey.last_error_text());
    return;
}

// Build our protected header:

// 	{
// 	  "alg": "ECDH-ES+A256KW",
// 	  "enc": "A256GCM",
// 	  "exp": 1621957030,
// 	  "cty": "NJWT",
// 	  "epk": {
// 	    "kty": "EC",
// 	    "x": "QLpJ_LpFx-6yJhsb4OvHwU1khLnviiOwYOvmf5clK7w"
// 	    "y": "AJh7pJ3zZKDJkm8rbeG69GBooTosXJgSsvNFH0i3Vxnu"
// 	    "crv": "BP-256"
// 	  }
// 	}

// Use jwt only for getting the current date/time + 3600 seconds.
let jwt = chilkat::Jwt::new();

let jwe_prot_hdr = chilkat::JsonObject::new();
let _ = jwe_prot_hdr.update_string("alg", "ECDH-ES+A256KW");
let _ = jwe_prot_hdr.update_string("enc", "A256GCM");
let _ = jwe_prot_hdr.update_int("exp", jwt.gen_numeric_date(3600));
let _ = jwe_prot_hdr.update_string("cty", "NJWT");
let _ = jwe_prot_hdr.update_string("epk.kty", "EC");
let _ = jwe_prot_hdr.update_string("epk.x", "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM");
let _ = jwe_prot_hdr.update_string("epk.y", "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4");
let _ = jwe_prot_hdr.update_string("epk.crv", "P-256");

let jwe = chilkat::Jwe::new();
let _ = jwe.set_protected_header(&jwe_prot_hdr);
let _ = jwe.set_public_key(0, &pubkey);

let plain_text = "This is the text to be encrypted.".to_string();
let Ok(str_jwe) = jwe.encrypt(&plain_text, "utf-8") else {
    println!("{}", jwe.last_error_text());
    return;
};

println!("{}", str_jwe);

// Let's decrypt...
let privkey = chilkat::PrivateKey::new();

if privkey.load_jwk(&json.emit().unwrap_or_default()).is_err() {
    println!("{}", privkey.last_error_text());
    return;
}

let jwe2 = chilkat::Jwe::new();
if jwe2.load_jwe(&str_jwe).is_err() {
    println!("{}", jwe2.last_error_text());
    return;
}

let _ = jwe2.set_private_key(0, &privkey);

//  Decrypt.
let Ok(decrypted_text) = jwe2.decrypt(0, "utf-8") else {
    println!("{}", jwe2.last_error_text());
    return;
};

println!("{}", decrypted_text);