AutoIt

RSA Sign an Encoded Hash

See more RSA Examples

Demonstrates signing a hash (e.g., SHA256) provided as an encoded string (e.g., base64 or hex). AutoIt

Local $bSuccess = False

; Assuming the smartcard/USB token is installed with the correct drivers from the manufacturer,
; this code can work on multiple platforms including Windows, MacOS, Linux, and iOS.

; Chilkat automatically detects and determines the way in which the HSM is used,
; which can be by PKCS11, Apple Keychain, Microsoft CNG / Crypto API, or ScMinidriver.

$oCert = ObjCreate("Chilkat.Cert")

; Set the token/smartcard PIN prior to loading.
$oCert.SmartCardPin = "123456"

; Specify the certificate by its common name.
$bSuccess = $oCert.LoadFromSmartcard("cn=chilkat-rsa-2048")
If ($bSuccess = False) Then
    ConsoleWrite($oCert.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("Signing with the private key for this cert: " & $oCert.SubjectCN & @CRLF)

; Create data to be hashed and signed.
$oBd = ObjCreate("Chilkat.BinData")
Local $i
For $i = 0 To 100
    $oBd.AppendEncoded("000102030405060708090A0B0C0D0E0F","hex")
Next

$oRsa = ObjCreate("Chilkat.Rsa")

; Use the certificate's private key for signing.
$bSuccess = $oRsa.SetX509Cert($oCert,True)
If ($bSuccess = False) Then
    ConsoleWrite($oRsa.LastErrorText & @CRLF)
    Exit
EndIf

; We'll first compute the hash and then pass the encoded hash to be signed.
Local $sha256_base64 = $oBd.GetHash("sha256","base64")
ConsoleWrite("sha256 hash in base64 format: " & $sha256_base64 & @CRLF)

; Pass in the base64 hash and return a base64 signature.
$oRsa.EncodingMode = "base64"
Local $sRsaSig_base64 = $oRsa.SignHashENC($sha256_base64,"sha256")
If ($bSuccess = False) Then
    ConsoleWrite($oRsa.LastErrorText & @CRLF)
    Exit
EndIf

ConsoleWrite("RSA signature as base64: " & $sRsaSig_base64 & @CRLF)