Zig

Compute JWK Thumbprint for RSA and EC Private Keys

See more ECC Examples

Demonstrates how to compute a JSON Web Key thumbprint for a private key (RSA or ECC).

Note: This example requires Chilkat v9.5.0.66 or greater.

Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    const priv_key = try chilkat.PrivateKey.init();
    defer priv_key.deinit();

    // A private key can be loaded from any format (binary DER, PEM, etc.)
    // This example will load the private keys from PEM format,
    // and will then compute the JWK thumbprint.

    // First do it for this RSA private key...

    const sb_pem = try chilkat.StringBuilder.init();
    defer sb_pem.deinit();
    const b_crlf = true;
    sb_pem.appendLine("-----BEGIN RSA PRIVATE KEY-----", b_crlf) catch {};
    sb_pem.appendLine("Proc-Type: 4,ENCRYPTED", b_crlf) catch {};
    sb_pem.appendLine("DEK-Info: DES-EDE3-CBC,2E65118E6C7B5207", b_crlf) catch {};
    sb_pem.appendLine("", b_crlf) catch {};
    sb_pem.appendLine("7cYUTW4ZBdmVZ4ILB08hcTdm5ib0E0zcy+I7pHpNQfJHtI7BJ4omys5S19ufJPBJ", b_crlf) catch {};
    sb_pem.appendLine("IzYjeO7oTVqI37F6EUmjZqG4WVE2UQbQDkosZbZN82O4Ipu1lFAPEbwjqePMKufz", b_crlf) catch {};
    sb_pem.appendLine("snSQHKfnbyyDPEVNlJbs19NXC8v6g+pQay5rH/I6N2iBxgsTmuemZ54EhNQMZyEN", b_crlf) catch {};
    sb_pem.appendLine("R/CiheArWEH9H8/4hd2gc9Tb2s0MwGHILL4kbbNm5tp3xw4ik7OYWNrj3m+nG6Xb", b_crlf) catch {};
    sb_pem.appendLine("vKXh2xEanAZAyMXTqDJTHdn7/CEqusQPJjZGV+Mf1kjKu7p4qcXFnIXP5ILnTW7b", b_crlf) catch {};
    sb_pem.appendLine("lHoWC4eweDzKOMRzXmbABEVSUvx2SmPl4TcoC5L1SCAHEmZaKbaY7S5l53u6gl0f", b_crlf) catch {};
    sb_pem.appendLine("ULuQbt7Hr3THznlNFKkGT1/yVNt2QOm1emZd55LaNe8E7XsNSlhl0grYQ+Ue8Jba", b_crlf) catch {};
    sb_pem.appendLine("x85OapltVjxM9wVCwbgFyi04ihdKHo9e+uYKeTGKv0hU5O7HEH1ev6t/s2u/UG6h", b_crlf) catch {};
    sb_pem.appendLine("TqEsYrVp0CMHpt5uAF6nZyK6GZ/CHTxh/rz1hADMofem59+e6tVtjnPGA3EjnJT8", b_crlf) catch {};
    sb_pem.appendLine("BMOw/D2QIDxjxj2GUzz+YJp50ENhWrL9oSDkG2nzv4NVL77QIy+T/2/f4PgokUDO", b_crlf) catch {};
    sb_pem.appendLine("QJjIfxPWE40cHGHpnQtZvEPoxP0H3T0YhmEVwuJxX3uaWOY/8Fa1c7Ln0SwWdfV5", b_crlf) catch {};
    sb_pem.appendLine("gYvJV8o6c3sumcq1O3agPDlHC5O4IxG7AZQ8CHRDyASogzfkY6P579ZOGYaO4al7", b_crlf) catch {};
    sb_pem.appendLine("WA1YIpsHs3/1f4SByMuWe0NVkFfvXckjpqGrBQpTmqQzk6baa0VQ0cwU3XlkwHac", b_crlf) catch {};
    sb_pem.appendLine("WB/fQ4jylwFzZDcp5JAo53n6aU72zgNvDlGTNKwdXXZI5U3JPocH0AiZgFFWYJLd", b_crlf) catch {};
    sb_pem.appendLine("63PJLDnjyE3i6XMVlxifXKkXVv0RYSz+ByS7Oz9aCgnQhNU8ycv+UxtfkPQih5zE", b_crlf) catch {};
    sb_pem.appendLine("/0Y2EEFknajmFJpNXczzF8OEzaswmR0AOjcCiklZKRf61rf5faJxJhhqKEEBJuL6", b_crlf) catch {};
    sb_pem.appendLine("oodDVRk3OGU1yQSBazT8nK3V+e6FMo3tWkra2BXFCD+pKxTy014Cp59S1w6F1Fjt", b_crlf) catch {};
    sb_pem.appendLine("WX7eMWSLWfQ56j2kLMBHq5gb2arqlqH3fsYOTD3TNjCYF3Sgx309kVPuOK5vw61P", b_crlf) catch {};
    sb_pem.appendLine("pnL/LN3iGY42WR+9lfAyNN2qj9zvwKwscyYs5+DPQoPmcPcVGc3v/u66bLcOGbEU", b_crlf) catch {};
    sb_pem.appendLine("OlGa/6gdD4GCp5E4fP/7GbnEY/PW2abquFhGB+pVdl3/4+1U/8kItlfWNZoG4FhE", b_crlf) catch {};
    sb_pem.appendLine("gjMd7glmrdFiNJFFpf5ks1lVXGqJ4mZxqtEZrxUEwciZjm4V27a+E2KyV9NnksZ6", b_crlf) catch {};
    sb_pem.appendLine("xF4tGPKIPsvNTV5o8ZqjiacxgbYmr2ywqDXKCgpU/RWSh1sLapqSQqbH/w0MquUj", b_crlf) catch {};
    sb_pem.appendLine("VhVX0RMYH/foKtjagZf/KO1/mnCITl86treIdachGgR4wr/qqMjrpPUaPLCRY3JQ", b_crlf) catch {};
    sb_pem.appendLine("00XUP1Mu6YPE0SnMYAVxZheqKHly3a1pg4Xp7YWlM671oUORs3+VENfnbIxgr+2D", b_crlf) catch {};
    sb_pem.appendLine("TiJT9PxwpfK53Oh7RBSWHJZRuAdLUXE8DG+bl0N/QkJM6pFUxTI1AQ==", b_crlf) catch {};
    sb_pem.appendLine("-----END RSA PRIVATE KEY-----", b_crlf) catch {};

    // The actual password for the above PEM is "passwd".
    priv_key.loadEncryptedPem(try sb_pem.getAsString(alloc), "passwd") catch {
        std.debug.print("{s}\n", .{try priv_key.getLastErrorText(alloc)});
        return;
    };

    // Generate the JWK thumbprint:
    std.debug.print("JWK thumbprint: {s}\n", .{try priv_key.getJwkThumbprint(alloc, "SHA256")});

    // Output:
    // JWK thumbprint: QzUpUAW1Y5iksGxq3r1o3JMROR6D7FLwvRlHmDQVg0I

    // --------------------------------------------------------------
    // Now let's do an EC private key.  The following is an unencrypted PEM containing a 384-bit EC key..
    sb_pem.clear();
    sb_pem.appendLine("-----BEGIN PRIVATE KEY-----", b_crlf) catch {};
    sb_pem.appendLine("MIG2AgEAMBAGByqGSM49AgEGBSuBBAAiBIGeMIGbAgEBBDAamStb0Xep3y3sWw2u", b_crlf) catch {};
    sb_pem.appendLine("SSAdUPkgQ9Rvhlnx8XEVOYy2teh69T0on77ja02m03n8t8WhZANiAARUNSar38Rz", b_crlf) catch {};
    sb_pem.appendLine("lKPyZFsNSGUanzpNRth0C+MikVEH8FAlDHMMpAs34dyF4IK0uxgbiEe9bQ+ieLrl", b_crlf) catch {};
    sb_pem.appendLine("6xwFR0yaTivuwoyXC+ScGUnwnpaXmid6UUgw4ypbneHsaKuZ9JLdMAo=", b_crlf) catch {};
    sb_pem.appendLine("-----END PRIVATE KEY-----", b_crlf) catch {};

    priv_key.loadPem(try sb_pem.getAsString(alloc)) catch {
        std.debug.print("{s}\n", .{try priv_key.getLastErrorText(alloc)});
        return;
    };

    // Generate the JWK thumbprint:
    std.debug.print("JWK thumbprint: {s}\n", .{try priv_key.getJwkThumbprint(alloc, "SHA256")});

    // Output:
    // JWK thumbprint: ABAUUfNSONFsZYvZ_o_0bsPT3qeG3jttXB09VC_ETWQ
}