Java

Encrypt/Decrypt using PFX to produce -----BEGIN PKCS7----- ... -----END PKCS7-----

See more Encryption Examples

First we encrypt using a certificate + public key to produce output such as:

-----BEGIN PKCS7-----
MIIHPwYJKoZIhvcNAQcEoIIHMDCCBywC ...
...
...
-----END PKCS7-----

Then we decrypt using the cert + private key. Chilkat2 Java

import com.chilkatsoft.chilkat2.Cert;
import com.chilkatsoft.chilkat2.ChilkatException;
import com.chilkatsoft.chilkat2.Crypt2;
import com.chilkatsoft.chilkat2.StringBuilder;

public class ChilkatExample {

    public static void main(String[] args) {
        boolean success = false;

        // This example requires the Chilkat API to have been previously unlocked.
        // See Global Unlock Sample for sample code.

        Crypt2 crypt = new Crypt2();

        // Specify the encryption to be used.
        // "pki" indicates "Public Key Infrastructure" and will create a PKCS7 encrypted (enveloped) message.
        crypt.setCryptAlgorithm("pki");
        crypt.setPkcs7CryptAlg("aes");
        crypt.setKeyLength(128);
        crypt.setOaepHash("sha256");
        crypt.setOaepPadding(true);

        // A certificate is needed as the encryption key.
        // Althought the PFX contains the associated private key, we don't need it for encryption.
        // (A certificate usually contains the public key by default.)
        Cert cert = new Cert();
        try {
            cert.loadPfxFile("qa_data/pfx/cert_test123.pfx", "test123");
            success = true;
        } catch (ChilkatException e) {
            success = false;
        }
        if (!success) {
            System.out.println(cert.getLastErrorText());
            return;
        }

        // Tell the crypt object to use the certificate.
        crypt.setEncryptCert(cert);

        String toBeEncrypted = "This string is to be encrypted.";

        // Get the result in multi-line BASE64 MIME format.
        crypt.setEncodingMode("base64_mime");

        String encryptedStr = crypt.encryptStringENC(toBeEncrypted);
        if (!success) {
            System.out.println(crypt.getLastErrorText());
            return;
        }

        // Make a "-----BEGIN PKCS7-----" ... "-----END PKCS7-----" sandwich...
        StringBuilder sb = new StringBuilder();
        sb.appendLine("-----BEGIN PKCS7-----", true);
        sb.append(encryptedStr);
        sb.appendLine("-----END PKCS7-----", true);

        String outStr = sb.getAsString();

        System.out.println(outStr);

        // Sample output:

        // -----BEGIN PKCS7-----
        // MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggH0MIIB8AIBADCBrDCBlzELMAkGA1UEBhMCR0Ix
        // GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
        // Q09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0
        // aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEB6M1ZwZdZU7LrAIdurulmUwOAYJKoZIhvcNAQEHMCug
        // DzANBglghkgBZQMEAgEFAKEYMBYGCSqGSIb3DQEBCDAJBgUrDgMCGgUABIIBAK/BZG/iXJ8az7zL
        // 8EQ77mc+oDPQ4w1hyytK2ip4djkPVvTfYhcoDQ+G/DBU+urJfrVBi5H9gmpXwYyfKlyUxBVRVEJl
        // V/V5QQi4JmNTFbmgWh5tp9zDS98l6A2Va4Zs0Wy/owGLfvwitlxd1dsfVAV2hmBYS24BMpNcty5/
        // 0atcKYmSou13G78ztTKdMy1tECgZy8kerMsPdDQbSxEZkT3KpQ8C5uEQqYF3bIVaeZzha/Ywieh/
        // tvO0T4aAmeJufwkNdVECmU7kuhnNaVPXknFl7jeibTl6zA/VcJKBKcIYT9FRC7KjdooI8q+jtQ/V
        // k6RP4POaowkFg1QWRPEWeqIwTAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBAgQQEEFQduqeJqXQXzy4
        // JpkoDoAgdldJDB9zEkpMpgr5/fR2iLvh5kC6BPfhOYjsawBY4Ok=
        // -----END PKCS7-----

        // ----------------------------------------------------------------------------------------
        // Let's Decrypt the above string.

        // Start with what was produced above..
        sb.clear();
        boolean bCrlf = true;
        sb.appendLine("-----BEGIN PKCS7-----", bCrlf);
        sb.appendLine("MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggH0MIIB8AIBADCBrDCBlzELMAkGA1UEBhMCR0Ix", bCrlf);
        sb.appendLine("GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR", bCrlf);
        sb.appendLine("Q09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0", bCrlf);
        sb.appendLine("aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEB6M1ZwZdZU7LrAIdurulmUwOAYJKoZIhvcNAQEHMCug", bCrlf);
        sb.appendLine("DzANBglghkgBZQMEAgEFAKEYMBYGCSqGSIb3DQEBCDAJBgUrDgMCGgUABIIBAK/BZG/iXJ8az7zL", bCrlf);
        sb.appendLine("8EQ77mc+oDPQ4w1hyytK2ip4djkPVvTfYhcoDQ+G/DBU+urJfrVBi5H9gmpXwYyfKlyUxBVRVEJl", bCrlf);
        sb.appendLine("V/V5QQi4JmNTFbmgWh5tp9zDS98l6A2Va4Zs0Wy/owGLfvwitlxd1dsfVAV2hmBYS24BMpNcty5/", bCrlf);
        sb.appendLine("0atcKYmSou13G78ztTKdMy1tECgZy8kerMsPdDQbSxEZkT3KpQ8C5uEQqYF3bIVaeZzha/Ywieh/", bCrlf);
        sb.appendLine("tvO0T4aAmeJufwkNdVECmU7kuhnNaVPXknFl7jeibTl6zA/VcJKBKcIYT9FRC7KjdooI8q+jtQ/V", bCrlf);
        sb.appendLine("k6RP4POaowkFg1QWRPEWeqIwTAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBAgQQEEFQduqeJqXQXzy4", bCrlf);
        sb.appendLine("JpkoDoAgdldJDB9zEkpMpgr5/fR2iLvh5kC6BPfhOYjsawBY4Ok=", bCrlf);
        sb.appendLine("-----END PKCS7-----", bCrlf);

        Crypt2 decrypt = new Crypt2();
        decrypt.setCryptAlgorithm("pki");

        // Use the same cert + private key from the PFX above.
        // For decryption, we need the private key.  Given that the certificate was loaded from a PFX,
        // we should already have it.
        decrypt.setDecryptCert(cert);

        decrypt.setEncodingMode("base64");
        String decryptedText = decrypt.decryptStringENC(sb.getBetween("-----BEGIN PKCS7-----", "-----END PKCS7-----"));

        System.out.println(decryptedText);
    }
}