Xbase++

JWE using ECDH-ES+A256KW

See more JSON Web Encryption (JWE) Examples

Create a JWE with the following public/private key pair:

{
    "kty": "EC",
    "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
    "use": "enc",
    "crv": "P-256",
    "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
    "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
    "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
    "alg": "ECDH-ES+A256KW"
}

Also shows how to decrypt.

Xbase++

LOCAL nSuccess
LOCAL oJson
LOCAL oPubkey
LOCAL oJwt
LOCAL oJweProtHdr
LOCAL oJwe
LOCAL cPlainText
LOCAL cStrJwe
LOCAL oPrivkey
LOCAL oJwe2
LOCAL cDecryptedText

nSuccess := 0

//  This requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Create the following JSON:
//  {
//      "kty": "EC",
//      "d": "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c",
//      "use": "enc",
//      "crv": "P-256",
//      "kid": "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs",
//      "x": "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM",
//      "y": "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4",
//      "alg": "ECDH-ES+A256KW"
//  }

oJson := CreateObject("Chilkat.JsonObject")
oJson:UpdateString("kty", "EC")
oJson:UpdateString("d", "jZCffzVqJjryBH4EoaN0oD-TyLXrW2XHoDdIuPZnk8c")
oJson:UpdateString("use", "enc")
oJson:UpdateString("crv", "P-256")
oJson:UpdateString("kid", "evEK2thJMsWxBYRivXI8ykUf6n6zizLiLCGH3s58wKs")
oJson:UpdateString("x", "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM")
oJson:UpdateString("y", "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4")
oJson:UpdateString("alg", "ECDH-ES+A256KW")

oPubkey := CreateObject("Chilkat.PublicKey")

nSuccess := oPubkey:LoadFromString(oJson:Emit())
IF (nSuccess == 0)
    ? oPubkey:LastErrorText
    oJson:destroy()
    oPubkey:destroy()
    RETURN
ENDIF

//  Build our protected header:

//  	{
//  	  "alg": "ECDH-ES+A256KW",
//  	  "enc": "A256GCM",
//  	  "exp": 1621957030,
//  	  "cty": "NJWT",
//  	  "epk": {
//  	    "kty": "EC",
//  	    "x": "QLpJ_LpFx-6yJhsb4OvHwU1khLnviiOwYOvmf5clK7w"
//  	    "y": "AJh7pJ3zZKDJkm8rbeG69GBooTosXJgSsvNFH0i3Vxnu"
//  	    "crv": "BP-256"
//  	  }
//  	}

//  Use jwt only for getting the current date/time + 3600 seconds.
oJwt := CreateObject("Chilkat.Jwt")

oJweProtHdr := CreateObject("Chilkat.JsonObject")
oJweProtHdr:UpdateString("alg", "ECDH-ES+A256KW")
oJweProtHdr:UpdateString("enc", "A256GCM")
oJweProtHdr:UpdateInt("exp", oJwt:GenNumericDate(3600))
oJweProtHdr:UpdateString("cty", "NJWT")
oJweProtHdr:UpdateString("epk.kty", "EC")
oJweProtHdr:UpdateString("epk.x", "LOakgGvxWBsWbCPLY6Vq6OuBktIqG8POXFXe7ngQ2oM")
oJweProtHdr:UpdateString("epk.y", "voJvS6I-Mc4qqmEA_G2hLQqBck3a3vqaJbmzY7YPUD4")
oJweProtHdr:UpdateString("epk.crv", "P-256")

oJwe := CreateObject("Chilkat.Jwe")
oJwe:SetProtectedHeader(oJweProtHdr)
oJwe:SetPublicKey(0, oPubkey)

cPlainText := "This is the text to be encrypted."
cStrJwe := oJwe:Encrypt(cPlainText, "utf-8")
IF (oJwe:LastMethodSuccess != 1)
    ? oJwe:LastErrorText
    oJson:destroy()
    oPubkey:destroy()
    oJwt:destroy()
    oJweProtHdr:destroy()
    oJwe:destroy()
    RETURN
ENDIF

? cStrJwe

//  Let's decrypt...
oPrivkey := CreateObject("Chilkat.PrivateKey")

nSuccess := oPrivkey:LoadJwk(oJson:Emit())
IF (nSuccess == 0)
    ? oPrivkey:LastErrorText
    oJson:destroy()
    oPubkey:destroy()
    oJwt:destroy()
    oJweProtHdr:destroy()
    oJwe:destroy()
    oPrivkey:destroy()
    RETURN
ENDIF

oJwe2 := CreateObject("Chilkat.Jwe")
nSuccess := oJwe2:LoadJwe(cStrJwe)
IF (nSuccess == 0)
    ? oJwe2:LastErrorText
    oJson:destroy()
    oPubkey:destroy()
    oJwt:destroy()
    oJweProtHdr:destroy()
    oJwe:destroy()
    oPrivkey:destroy()
    oJwe2:destroy()
    RETURN
ENDIF

oJwe2:SetPrivateKey(0, oPrivkey)

//   Decrypt.
cDecryptedText := oJwe2:Decrypt(0, "utf-8")
IF (oJwe2:LastMethodSuccess != 1)
    ? oJwe2:LastErrorText
    oJson:destroy()
    oPubkey:destroy()
    oJwt:destroy()
    oJweProtHdr:destroy()
    oJwe:destroy()
    oPrivkey:destroy()
    oJwe2:destroy()
    RETURN
ENDIF

? cDecryptedText

oJson:destroy()
oPubkey:destroy()
oJwt:destroy()
oJweProtHdr:destroy()
oJwe:destroy()
oPrivkey:destroy()
oJwe2:destroy()