Perl Requires Chilkat v9.5.0.66+

Create JCEKS Containing Secret Keys

See more Java KeyStore (JKS) Examples

Demonstrates how to create a JCEKS keystore file containing symmetric secret keys (for AES, Blowfish, HMAC SHA25, ChaCha20, etc.) Chilkat2 Perl

use strict;
use warnings;
use Chilkat2;

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

my $jceks = Chilkat2::JavaKeyStore->new;

# We'll need a pseudo-random number generator (PRNG) to generate symmetric keys.
my $prng = Chilkat2::Prng->new;

# Generate some keys..

# 128-bit AES key (16 bytes)
my $aesKey = $prng->GenRandom(16, 'base64');

# 256-bit Blowfish key (32 bytes)
my $blowfishKey = $prng->GenRandom(32, 'base64');

# HMAC SHA256 key
# (An HMAC key can be anything, and any length. We'll use the following string:
my $hmacKey = 'This is my HMAC key';

# ChaCha20 256-bit
my $chachaKey = $prng->GenRandom(32, 'base64');

# Add each secret key to the JCEKS
my $encoding = 'base64';
my $password = 'secret';
$jceks->AddSecretKey($aesKey, $encoding, 'AES', 'my aes key', $password);
$jceks->AddSecretKey($blowfishKey, $encoding, 'BLOWFISH', 'my blowfish key', $password);
# For HMAC, we're using the us-ascii bytes for the key..
$jceks->AddSecretKey($hmacKey, 'ascii', 'HMAC_SHA256', 'my hmac key', $password);
$jceks->AddSecretKey($chachaKey, $encoding, 'CHACHA', 'my chacha20 key', $password);

my $filePassword = 'password';
# Write the JCEKs to a file.
my $success = $jceks->ToFile($filePassword, 'qa_output/secretKeys.jceks');
if (!$success) {
    print $jceks->LastErrorText, "\n";
    exit;
}

# We can also emit as a JWK Set..
my $sbJson = Chilkat2::StringBuilder->new;
$success = $jceks->ToJwkSet('secret', $sbJson);
if (!$success) {
    print $jceks->LastErrorText, "\n";
    exit;
}

# Emit the JSON in pretty-printed (indented) form:
my $json = Chilkat2::JsonObject->new;
$json->LoadSb($sbJson);
$json->EmitCompact(0);
print $json->Emit(), "\n";

# Output is:

# {
#   "keys": [
#     {
#       "kty": "oct",
#       "alg": "AES",
#       "k": "vHekQQB0Gc1NvppapUTW2g",
#       "kid": "my aes key"
#     },
#     {
#       "kty": "oct",
#       "alg": "BLOWFISH",
#       "k": "qHsdXaJsXicVCZbK8l8hJQpYOa0GkiO9gsRK9WLtht8",
#       "kid": "my blowfish key"
#     },
#     {
#       "kty": "oct",
#       "alg": "HMAC_SHA256",
#       "k": "VGhpcyBpcyBteSBITUFDIGtleQ",
#       "kid": "my hmac key"
#     },
#     {
#       "kty": "oct",
#       "alg": "CHACHA",
#       "k": "yNv832U43C9BcWvaQAH2_rG-GwfmpgT5JBRllWGQY1o",
#       "kid": "my chacha20 key"
#     }
#   ]
# }
#