3DES Encryption, ECB, CBC modes

3DES encryption. The Chilkat encryption component supports Triple-DES in both ECB (Electronic Cookbook) and CBC (Cipher-Block Chaining) cipher modes.

Download Chilkat Crypt ActiveX

CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @crypt int
    EXEC @hr = sp_OACreate 'Chilkat.Crypt2', @crypt OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @success int

    EXEC sp_OAMethod @crypt, 'UnlockComponent', @success OUT, 'Anything for 30-day trial'
    IF @success <> 1
      BEGIN
        PRINT 'Crypt component unlock failed'
        RETURN
      END

    --  Specify 3DES for the encryption algorithm:
    EXEC sp_OASetProperty @crypt, 'CryptAlgorithm', '3des'

    --  CipherMode may be "ecb" or "cbc"
    EXEC sp_OASetProperty @crypt, 'CipherMode', 'cbc'

    --  KeyLength must be 192.  3DES is technically 168-bits;
    --  the most-significant bit of each key byte is a parity bit,
    --  so we must indicate a KeyLength of 192, which includes
    --  the parity bits.
    EXEC sp_OASetProperty @crypt, 'KeyLength', 192

    --  The padding scheme determines the contents of the bytes
    --  that are added to pad the result to a multiple of the
    --  encryption algorithm's block size.  3DES has a block
    --  size of 8 bytes, so encrypted output is always
    --  a multiple of 8.
    EXEC sp_OASetProperty @crypt, 'PaddingScheme', 0

    --  EncodingMode specifies the encoding of the output for
    --  encryption, and the input for decryption.
    --  It may be "hex", "url", "base64", or "quoted-printable".
    EXEC sp_OASetProperty @crypt, 'EncodingMode', 'hex'

    --  An initialization vector is required if using CBC or CFB modes.
    --  ECB mode does not use an IV.
    --  The length of the IV is equal to the algorithm's block size.
    --  It is NOT equal to the length of the key.
    DECLARE @ivHex nvarchar(4000)

    SELECT @ivHex = '0001020304050607'
    EXEC sp_OAMethod @crypt, 'SetEncodedIV', NULL, @ivHex, 'hex'

    --  The secret key must equal the size of the key.  For
    --  3DES, the key must be 24 bytes (i.e. 192-bits).
    DECLARE @keyHex nvarchar(4000)

    SELECT @keyHex = '000102030405060708090A0B0C0D0E0F0001020304050607'
    EXEC sp_OAMethod @crypt, 'SetEncodedKey', NULL, @keyHex, 'hex'

    --  Encrypt a string...
    --  The input string is 44 ANSI characters (i.e. 44 bytes), so
    --  the output should be 48 bytes (a multiple of 8).
    --  Because the output is a hex string, it should
    --  be 96 characters long (2 chars per byte).
    DECLARE @encStr nvarchar(4000)

    EXEC sp_OAMethod @crypt, 'EncryptStringENC', @encStr OUT, 'The quick brown fox jumps over the lazy dog.'
    PRINT @encStr

    --  Now decrypt:
    DECLARE @decStr nvarchar(4000)

    EXEC sp_OAMethod @crypt, 'DecryptStringENC', @decStr OUT, @encStr
    PRINT @decStr
END
GO