Encrypt File to PKCS7 .p7m

C example to public-key encrypt a file creating a PKCS#7 .p7m file as output. Also demonstrates how to decrypt the .p7m to recover the original file.

Downloads:

MS Windows Visual C/C++ Libraries

Linux/CentOS C/C++ Libraries

MAC OS X C/C++ Libraries

Solaris C/C++ Libraries

C++ Builder Libraries

FreeBSD C++ Libraries

HP-UX C++ Libraries

BlackBerry QNX C++ Libraries

#include <C_CkCrypt2.h>
#include <C_CkCert.h>

void ChilkatSample(void)
    {
    HCkCrypt2 crypt;
    BOOL success;
    HCkCert encryptCert;
    const char * inFile;
    const char * outFile;
    HCkCrypt2 decrypt;
    const char * pfxFilename;
    const char * pfxPassword;

    crypt = CkCrypt2_Create();

    //  Any string argument automatically begins the 30-day trial.

    success = CkCrypt2_UnlockComponent(crypt,"30-day trial");
    if (success != TRUE) {
        printf("%s\n",CkCrypt2_lastErrorText(crypt));
        return;
    }

    //  Indicate the public-key encryption is to be used.
    //  Do this by setting the encryption algorithm equal
    //  to "PKI" (an acroynm for public-key infrastructure).
    CkCrypt2_putCryptAlgorithm(crypt,"PKI");

    //  Indicate the inner symmetric encryption algorithm to be used.
    //  possible values are "aes", "des", "3des", and "rc2".
    //  For this example, we'll use 256-bit AES encryption.
    CkCrypt2_putPkcs7CryptAlg(crypt,"aes");
    CkCrypt2_putKeyLength(crypt,256);

    //  To encrypt, only a certificate w/ public key is needed.
    //  (The certificate w/ private key is required for decryption.)

    //  The LoadFromFile method can load virtually any certificate format:
    //  1. DER encoded binary X.509 (.CER)
    //  2. Base-64 encoded X.509 (.CER)
    //  3. Cryptographic Message Syntax Standard - PKCS #7 Certificates (.P7B)
    //  4. PEM format
    encryptCert = CkCert_Create();
    success = CkCert_LoadFromFile(encryptCert,"/Users/chilkat/testData/cer/acme.cer");
    if (success != TRUE) {
        printf("%s\n",CkCert_lastErrorText(encryptCert));
        return;
    }

    //  Tell the crypt object to use the certificate for encrypting:
    CkCrypt2_AddEncryptCert(crypt,encryptCert);

    //  Encrypt a file, producing a .p7m as output.
    //  The input file is unchanged, the output .p7m contains the encrypted
    //  contents of the input file.

    inFile = "/Users/chilkat/testData/pdf/sample.pdf";

    outFile = "/Users/chilkat/testData/p7m/sample.pdf.p7m";
    success = CkCrypt2_CkEncryptFile(crypt,inFile,outFile);
    if (success != TRUE) {
        printf("%s\n",CkCrypt2_lastErrorText(crypt));
        return;
    }

    //  For demonstration purposes, a different instance of the object will be used
    //  for decryption.
    decrypt = CkCrypt2_Create();

    //  To decrypt, the certificate w/ private key is required.  A PFX (also known
    //  as PKCS#12) is a common secure container for certs and private keys.

    pfxFilename = "/Users/chilkat/testData/pfx/acme.pfx";

    pfxPassword = "secret";

    //  Tell the component to look in the PFX file for certs and private keys.
    success = CkCrypt2_AddPfxSourceFile(decrypt,pfxFilename,pfxPassword);
    if (success != TRUE) {
        printf("%s\n",CkCrypt2_lastErrorText(decrypt));
        return;
    }

    //  Tell the decrypt object that PKI (public key encryption) is to be used
    //  for decryptiong.
    CkCrypt2_putCryptAlgorithm(decrypt,"PKI");
    //  There is no need to set the Pkcs7Alg or KeyLength because this information
    //  is contained within the .p7m

    //  Decrypt the .p7m
    inFile = "/Users/chilkat/testData/p7m/sample.pdf.p7m";
    outFile = "/Users/chilkat/testData/pdf/recovered.pdf";
    success = CkCrypt2_CkDecryptFile(decrypt,inFile,outFile);
    if (success == FALSE) {
        printf("%s\n",CkCrypt2_lastErrorText(decrypt));
        return;
    }

    printf("Success!\n");

    CkCrypt2_Dispose(crypt);
    CkCert_Dispose(encryptCert);
    CkCrypt2_Dispose(decrypt);

    }