Question 1

What is the output format?

Accepted Answer

JSON with the same shape as input, but selected leaf values replaced by armored PGP message strings. Anyone can parse the JSON; only key-holders can read the encrypted values.

Question 2

Can I encrypt nested objects, not just leaves?

Accepted Answer

Yes — point to a nested path and the entire subtree is JSON-stringified before encryption. The decrypted result is parsed back into the original shape.

Question 3

Does encryption preserve types?

Accepted Answer

Strings stay strings (after decrypt); numbers, booleans, arrays, objects all round-trip correctly because they are JSON-stringified before encryption.

Question 4

Why not just encrypt the whole payload?

Accepted Answer

Whole-payload encryption requires every consumer to hold the private key. Field-level encryption lets routers, validators, or auditors process the structure while only authorized consumers see sensitive values.

Question 5

How do I encrypt different fields to different recipients?

Accepted Answer

Run the tool multiple times — each pass with a different public key and a different field selection. The result is a JSON document with mixed ciphertexts each readable by a different key holder.

Chiffreur JSON