Chilkat HOME .NET Core C# Android™ AutoIt C C# C++ Chilkat2-Python CkPython Classic ASP DataFlex Delphi ActiveX Delphi DLL Go Java Lianja Mono C# Node.js Objective-C PHP ActiveX PHP Extension Perl PowerBuilder PowerShell PureBasic Ruby SQL Server Swift 2 Swift 3,4,5... Tcl Unicode C Unicode C++ VB.NET VBScript Visual Basic 6.0 Visual FoxPro Xojo Plugin
(Unicode C) JWE using PBES2 Key WrappingDemonstrates how to create and decrypt a JWE that using PBES2 key wrapping. This example demonstrates PBES2 with HMAC SHA-256 and A128KW wrapping. It is also possible to do the following by simply changing the "alg" parameter:
Note: This example requires Chilkat v9.5.0.66 or greater.
#include <C_CkJweW.h> #include <C_CkJsonObjectW.h> #include <C_CkPrngW.h> void ChilkatSample(void) { BOOL success; const wchar_t *plaintext; HCkJweW jwe; HCkJsonObjectW jweProtHdr; HCkPrngW prng; int recipientIndex; const wchar_t *strJwe; HCkJweW jwe2; const wchar_t *originalPlaintext; // This requires the Chilkat API to have been previously unlocked. // See Global Unlock Sample for sample code. // Note: This example requires Chilkat v9.5.0.66 or greater. plaintext = L"Live long and prosper."; jwe = CkJweW_Create(); // First build the JWE Protected Header.. jweProtHdr = CkJsonObjectW_Create(); CkJsonObjectW_AppendString(jweProtHdr,L"alg",L"PBES2-HS256+A128KW"); CkJsonObjectW_AppendString(jweProtHdr,L"enc",L"A128GCM"); // PBES2 requires two additional parameters: // 1) A random salt parameter ("p2s") containing 8 or more bytes in base64url format. // 2) An iteration count parameter ("p2c"). A minimum count of 1000 is recommended. // The iteration count is intended to make the PBES2 computation more expensive (time consuming) // to prevent brute-force attacks. prng = CkPrngW_Create(); CkJsonObjectW_AppendString(jweProtHdr,L"p2s",CkPrngW_genRandom(prng,16,L"base64url")); CkJsonObjectW_AppendString(jweProtHdr,L"p2c",L"1000"); wprintf(L"JWE Protected Header: %s\n",CkJsonObjectW_emit(jweProtHdr)); wprintf(L"--\n"); // Don't forget to actually provide the protected header to the JWE object: CkJweW_SetProtectedHeader(jwe,jweProtHdr); // Set the PBES2 password recipientIndex = 0; CkJweW_SetPassword(jwe,recipientIndex,L"top secret"); // Encrypt and return the JWE: strJwe = CkJweW_encrypt(jwe,plaintext,L"utf-8"); if (CkJweW_getLastMethodSuccess(jwe) != TRUE) { wprintf(L"%s\n",CkJweW_lastErrorText(jwe)); CkJweW_Dispose(jwe); CkJsonObjectW_Dispose(jweProtHdr); CkPrngW_Dispose(prng); return; } // Show the JWE we just created: wprintf(L"%s\n",strJwe); // Decrypt the JWE. jwe2 = CkJweW_Create(); success = CkJweW_LoadJwe(jwe2,strJwe); if (success != TRUE) { wprintf(L"%s\n",CkJweW_lastErrorText(jwe2)); CkJweW_Dispose(jwe); CkJsonObjectW_Dispose(jweProtHdr); CkPrngW_Dispose(prng); CkJweW_Dispose(jwe2); return; } // Set the PBES2 password CkJweW_SetPassword(jwe2,recipientIndex,L"top secret"); // Decrypt. originalPlaintext = CkJweW_decrypt(jwe2,0,L"utf-8"); if (CkJweW_getLastMethodSuccess(jwe2) != TRUE) { wprintf(L"%s\n",CkJweW_lastErrorText(jwe2)); CkJweW_Dispose(jwe); CkJsonObjectW_Dispose(jweProtHdr); CkPrngW_Dispose(prng); CkJweW_Dispose(jwe2); return; } wprintf(L"original text: \n"); wprintf(L"%s\n",originalPlaintext); // Sample output: // JWE Protected Header: {"alg":"PBES2-HS256+A128KW","enc":"A128GCM","p2s":"z39rTEfRy1T1Yn_D1mZRlg","p2c":"1000"} // -- // eyJhbGciOiJQQkVTMi1IUzI1NitBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIiwicDJzIjoiejM5clRFZlJ5MVQxWW5fRDFtWlJsZyIsInAyYyI6IjEwMDAifQ.koYt6PrFmYwcwdcT7ZcvXHA1d-Xez5h4.luGlbvEnZp-7IsBOj42Yhw.YMTcfLf8Qe4zazozGV2OAu3cUdQ8Kg.rWub47ESWkc6IqZJTvSTmg // original text: // Live long and prosper. CkJweW_Dispose(jwe); CkJsonObjectW_Dispose(jweProtHdr); CkPrngW_Dispose(prng); CkJweW_Dispose(jwe2); } |
© 2000-2024 Chilkat Software, Inc. All Rights Reserved.