Lua

ClickBank Decrypt Instant Notification

See more ClickBank Examples

Demonstrates how to decrypt a ClickBank instant notification. See Instant Notification Service for more information and alternative code snippets. Lua

local chilkat = require("chilkat")

-- This example assumes the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

-- secret key from your ClickBank account
local secretKey = "MY_SECRET_KEY"

local jsonStr = "{\"notification\":\"BASE64_NOTIFICATION\",\"iv\":\"BASE64_IV\"}"

local json = chilkat.JsonObject.new()
local success = json:load(jsonStr)

-- Get the encrypted notification (binary) and IV from the JSON.
local bdNotif = chilkat.BinData.new()
local bdIv = chilkat.BinData.new()

success = bdNotif:append_encoded(json:string_of("notification"), "base64")
success = bdIv:append_encoded(json:string_of("iv"), "base64")

-- Get an SHA1 digest (as a hex string) of the secret key.
-- A SHA1 digest is 20 bytes.  Therefore the hex string is 40 chars.
-- Treat each us-ascii char as a binary byte of the secret key.
-- 256-bit AES needs a 256-bit key, which is 32-bytes.  Therefore
-- use the 1st 32 us-ascii chars of the hex SHA1 as the AES secret key.

local crypt = chilkat.Crypt2.new()
-- Because we're using the hex string as the actual AES key, it matters whether the hex is uppercase or lowercase.
-- We want lowercase.
crypt.encoding_mode = "hex_lower"
crypt.hash_algorithm = "sha1"
local hexSha1 = crypt:hash_string_enc(secretKey)
print(hexSha1)

-- Treat the hex string as binary data for the AES key..
local bdKey = chilkat.BinData.new()
bdKey:append_string(hexSha1, "us-ascii")
bdKey:remove_chunk(32, 8)

crypt.key_length = 256
crypt.crypt_algorithm = "aes"
crypt.cipher_mode = "cbc"

-- We can use any encoding because were just getting the binary bytes in an encoding, and then setting from the same encoding.
-- We'll just use base64..
crypt:set_encoded_iv(bdIv:get_encoded("base64"), "base64")
crypt:set_encoded_key(bdKey:get_encoded("base64"), "base64")

crypt:decrypt_bd(bdNotif)
print("Decrypted: " .. bdNotif:get_string("utf-8"))