(DataFlex) Generate RSA Key and Export to PKCS1 / PKCS8

DataFlex example code showing how to generate an RSA public/private key and save to PKCS1 and PKCS8 format files. In a PKCS1 or PKCS8 formatted file, the key is stored in binary ASN.1 format (and ASN.1 is itself written according to DER -- Distinguished Encoding Rules). A PEM file simply contains the binary ASN.1 base64 encoded and delimited by BEGIN/END lines. PKCS1 format files are never encrypted. PKCS8 can be encrypted or unencrypted. Public keys are never encrypted (there is no need). Private keys *should* always be encrypted - unless perhaps the unencrypted private key is obtained and itself stored in some sort of secure place.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-9.5.0-win32.pkg

Procedure Test
    Handle hoRsa
    Boolean iSuccess
    Variant vPubKey
    Handle hoPubKey
    Variant vPrivKey
    Handle hoPrivKey
    String sPubKeyPem
    String sPubKeyPkcs8Base64
    String sPubKeyPkcs1Base64
    String sPrivKeyPem
    String sPrivKeyEncPem
    String sPrivKeyPkcs1Base64
    String sPrivKeyPkcs8Base64
    String sTemp1

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatRsa)) To hoRsa
    If (Not(IsComObjectCreated(hoRsa))) Begin
        Send CreateComObject of hoRsa
    End

    // Generate a 2048-bit key.  Chilkat RSA supports
    // key sizes ranging from 512 bits to 8192 bits.
    Get ComGenerateKey Of hoRsa 2048 To iSuccess
    If (iSuccess <> True) Begin
        Get ComLastErrorText Of hoRsa To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    // Get the public and private key parts:
    Get ComExportPublicKeyObj Of hoRsa To vPubKey
    If (IsComObject(vPubKey)) Begin
        Get Create (RefClass(cComChilkatPublicKey)) To hoPubKey
        Set pvComObject Of hoPubKey To vPubKey
    End
    Get ComExportPrivateKeyObj Of hoRsa To vPrivKey
    If (IsComObject(vPrivKey)) Begin
        Get Create (RefClass(cComChilkatPrivateKey)) To hoPrivKey
        Set pvComObject Of hoPrivKey To vPrivKey
    End

    // Get the public key as a PKCS8 PEM string
    Get ComGetPem Of hoPubKey False To sPubKeyPem
    Showln sPubKeyPem

    // Get the public key in PKCS8 format, in a Base64 encoded string.
    Get ComGetEncoded Of hoPubKey False "base64" To sPubKeyPkcs8Base64
    Showln sPubKeyPkcs8Base64

    // Get the public key in PKCS1 format, in a Base64 encoded string.
    Get ComGetEncoded Of hoPubKey True "base64" To sPubKeyPkcs1Base64
    Showln sPubKeyPkcs1Base64

    // Get the private key in a PKCS8 PEM string.
    Get ComGetPkcs8Pem Of hoPrivKey To sPrivKeyPem
    Showln sPrivKeyPem

    // Get the private key in a PKCS8 encrypted PEM string.
    Get ComGetPkcs8EncryptedPem Of hoPrivKey "myPassword" To sPrivKeyEncPem
    Showln sPrivKeyEncPem

    // Get the private key in PKCS1 Base64 format
    Get ComGetPkcs1ENC Of hoPrivKey "base64" To sPrivKeyPkcs1Base64
    Showln sPrivKeyPkcs1Base64

    // Get the private key in PKCS8 Base64 format
    Get ComGetPkcs8ENC Of hoPrivKey "base64" To sPrivKeyPkcs8Base64
    Showln sPrivKeyPkcs8Base64

    // Save to PKCS1 / PKCS8 / PEM files...

    // Save the public key to PKCS8 binary DER
    Get ComSaveDerFile Of hoPubKey False "pubKey_pkcs8.der" To iSuccess

    // Save the public key to PKCS1 binary DER
    Get ComSaveDerFile Of hoPubKey "pubKey_pkcs1.der" To iSuccess

    // Save the private key to unencrypted binary PKCS1 DER.
    // Note: PKCS1 is never found in an encrypted format. 
    Get ComSavePkcs1File Of hoPrivKey "privKey_pkcs1.der" To iSuccess

    // Save the private key to unencrypted binary PKCS8
    Get ComSavePkcs8File Of hoPrivKey "privKey_pkcs8.der" To iSuccess

    // Save the private key to encrypted binary PKCS8
    Get ComSavePkcs8EncryptedFile Of hoPrivKey "myPassword" "privKey_enc_pkcs8.der" To iSuccess

    // Save the private key to unencrypted PKCS8 PEM
    Get ComSavePkcs8PemFile Of hoPrivKey "privKey.pem" To iSuccess

    // Save the private key to encrypted PKCS8 PEM
    Get ComSavePkcs8EncryptedPemFile Of hoPrivKey "myPassword" "privKey_enc.pem" To iSuccess

    Send Destroy of hoPubKey
    Send Destroy of hoPrivKey


End_Procedure