JOSE example

jose-example.rb

require 'jose'

class User
  attr_accessor :email, :puid, :ec_key

  def initialize(email, puid, ec_key = ECKey.new)
    @email = email
    @puid = puid
    @ec_key = ec_key
  end
end

class ECKey
  attr_accessor :private_key
  attr_reader :public_key

  def initialize(private_key = JOSE::JWK.generate_key([:ec, "P-384"]))
    @private_key = private_key
    @public_key = JOSE::JWK.to_public(private_key)
  end
end

data = {"key": "value"}

jimmy = User.new("jimmy@mailsac.com","jimmy_puid")
billy = User.new("billy@mailsac.com","billy_puid")

encrypted_data = JOSE::JWE.block_encrypt([billy.ec_key.public_key,jimmy.ec_key.private_key],
                                         data.to_s,
                                         {"alg" => "ECDH-ES+A256KW", "enc" => "A256GCM"})

p encrypted_data

decrypted_data = JOSE::JWE.block_decrypt([jimmy.ec_key.public_key,billy.ec_key.private_key],
                                         encrypted_data).first

p decrypted_data