PureBasic

ScMinidriver - Get Public Keys from Smart Card Key Container

See more ScMinidriver Examples

Demonstrates how to query a key container on a smart card (or USB token) to get the public part of the private keys that are present. A key container can hold two separate private keys -- one in the "signature" position, and the other in the "key exchange" position. PureBasic

IncludeFile "CkPublicKey.pb"
IncludeFile "CkScMinidriver.pb"

Procedure ChilkatExample()

    success.i = 0

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    ; Chilkat recommends the following free tool for interactively examining the contents of your smart card
    ; through the ScMinidriver interface:  MGTEK Tool for Minidriver enabled Smart Cards

    ; Let's first look at our smart card..
    ; Here's the view of our Gemalto (Thales) IDPrime MD T=0 smart card in the MGTEK tool:

    ; (image:https://example-code.com/images/gemalto_idprime_after_key_import.JPG/endImage)

    scmd.i = CkScMinidriver::ckCreate()
    If scmd.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; First we need to acquire a context to the smart card in the reader where it is inserted.
    ; Reader names (smart card readers or USB tokens) can be discovered
    ; via List Readers or Find Smart Cards
    readerName.s = "Alcor Micro USB Smart Card Reader 0"
    success = CkScMinidriver::ckAcquireContext(scmd,readerName)
    If success = 0
        Debug CkScMinidriver::ckLastErrorText(scmd)
        CkScMinidriver::ckDispose(scmd)
        ProcedureReturn
    EndIf

    ; If successful, the name of the currently inserted smart card is available:
    Debug "Card name: " + CkScMinidriver::ckCardName(scmd)

    ; We likely shouldn't need to authenticate with the smart card (use a PIN) to simply get a public key,
    ; so we can skip the PIN authenticatin step..

    ; Let's get the key(s) present in Container #7.
    ; In our case (shown in the image above), there is a private key in the "key exchange" position, but no key in the "signature" position.
    pubkey_sig.i = CkPublicKey::ckCreate()
    If pubkey_sig.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    pubkey_kex.i = CkPublicKey::ckCreate()
    If pubkey_kex.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkScMinidriver::ckGetContainerKeys(scmd,7,pubkey_sig,pubkey_kex)
    If success = 0
        Debug CkScMinidriver::ckLastErrorText(scmd)
        CkScMinidriver::ckDispose(scmd)
        CkPublicKey::ckDispose(pubkey_sig)
        CkPublicKey::ckDispose(pubkey_kex)
        ProcedureReturn
    EndIf

    If CkPublicKey::ckEmpty(pubkey_sig) = 1
        Debug "No signature key is present."
    Else
        Debug "Signature key:"
        Debug CkPublicKey::ckGetPem(pubkey_sig,1)
    EndIf

    If CkPublicKey::ckEmpty(pubkey_kex) = 1
        Debug "No Key Exchange key is present."
    Else
        Debug "Key Exchange key:"
        Debug CkPublicKey::ckGetPem(pubkey_kex,1)
    EndIf

    CkScMinidriver::ckDeleteContext(scmd)

    Debug "Success."

    ; Here's the output of the above sample code:

    ; Card name: IDPrime MD T=0
    ; No signature key is present.
    ; Key Exchange key:
    ; -----BEGIN RSA PUBLIC KEY-----
    ; MIIBCgKCAQEAsXeRhM55P13FbpNcXAMR3olbw2Wa6keZIHu5YTZYUBTlYWId+pNi
    ; wUz3zFIEo+0IfYR0H27ybIycQO+1IIzJofUFNMAL3tZps2OKPlsjuCPls6kXpXhv
    ; /gvhux8LrCtp4PcKWqJ6QVOZKChc7WAx40qFWzHi57ueqRTv3x0kESqGg/VjsqyT
    ; Evb55psJO2RsfhLT7+YVh3hImRM3RDaJdkTkPuOxeFyT6N7VXD09329sLuS3QkUb
    ; E9zEKDnz9X3d8dEQdJhSI9ba5fxl8R7fu8pB67ElfzFml96X1jLFtzy1pzOT5Fc4
    ; ROcaqlYckVzdBq9sxezm6MYmDBjNAcibRwIDAQAB
    ; -----END RSA PUBLIC KEY-----


    CkScMinidriver::ckDispose(scmd)
    CkPublicKey::ckDispose(pubkey_sig)
    CkPublicKey::ckDispose(pubkey_kex)


    ProcedureReturn
EndProcedure