Rust

Encrypt/Decrypt using PFX to produce -----BEGIN PKCS7----- ... -----END PKCS7-----

See more Encryption Examples

First we encrypt using a certificate + public key to produce output such as:

-----BEGIN PKCS7-----
MIIHPwYJKoZIhvcNAQcEoIIHMDCCBywC ...
...
...
-----END PKCS7-----

Then we decrypt using the cert + private key. Rust

let mut success = false;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let crypt = chilkat::Crypt2::new();

// Specify the encryption to be used.
// "pki" indicates "Public Key Infrastructure" and will create a PKCS7 encrypted (enveloped) message.
crypt.set_crypt_algorithm("pki");
crypt.set_pkcs7_crypt_alg("aes");
crypt.set_key_length(128);
crypt.set_oaep_hash("sha256");
crypt.set_oaep_padding(true);

// A certificate is needed as the encryption key.
// Althought the PFX contains the associated private key, we don't need it for encryption.
// (A certificate usually contains the public key by default.)
let cert = chilkat::Cert::new();
success = cert.load_pfx_file("qa_data/pfx/cert_test123.pfx", "test123").is_ok();
if !success {
    println!("{}", cert.last_error_text());
    return;
}

// Tell the crypt object to use the certificate.
let _ = crypt.set_encrypt_cert(&cert);

let to_be_encrypted = "This string is to be encrypted.".to_string();

// Get the result in multi-line BASE64 MIME format.
crypt.set_encoding_mode("base64_mime");

let encrypted_str = crypt.encrypt_string_enc(&to_be_encrypted).unwrap_or_default();
if !success {
    println!("{}", crypt.last_error_text());
    return;
}

// Make a "-----BEGIN PKCS7-----" ... "-----END PKCS7-----" sandwich...
let sb = chilkat::StringBuilder::new();
let _ = sb.append_line("-----BEGIN PKCS7-----", true);
let _ = sb.append(&encrypted_str);
let _ = sb.append_line("-----END PKCS7-----", true);

let out_str = sb.get_as_string().unwrap_or_default();

println!("{}", out_str);

// Sample output:

// -----BEGIN PKCS7-----
// MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggH0MIIB8AIBADCBrDCBlzELMAkGA1UEBhMCR0Ix
// GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
// Q09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0
// aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEB6M1ZwZdZU7LrAIdurulmUwOAYJKoZIhvcNAQEHMCug
// DzANBglghkgBZQMEAgEFAKEYMBYGCSqGSIb3DQEBCDAJBgUrDgMCGgUABIIBAK/BZG/iXJ8az7zL
// 8EQ77mc+oDPQ4w1hyytK2ip4djkPVvTfYhcoDQ+G/DBU+urJfrVBi5H9gmpXwYyfKlyUxBVRVEJl
// V/V5QQi4JmNTFbmgWh5tp9zDS98l6A2Va4Zs0Wy/owGLfvwitlxd1dsfVAV2hmBYS24BMpNcty5/
// 0atcKYmSou13G78ztTKdMy1tECgZy8kerMsPdDQbSxEZkT3KpQ8C5uEQqYF3bIVaeZzha/Ywieh/
// tvO0T4aAmeJufwkNdVECmU7kuhnNaVPXknFl7jeibTl6zA/VcJKBKcIYT9FRC7KjdooI8q+jtQ/V
// k6RP4POaowkFg1QWRPEWeqIwTAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBAgQQEEFQduqeJqXQXzy4
// JpkoDoAgdldJDB9zEkpMpgr5/fR2iLvh5kC6BPfhOYjsawBY4Ok=
// -----END PKCS7-----

// ----------------------------------------------------------------------------------------
// Let's Decrypt the above string.

// Start with what was produced above..
sb.clear();
let b_crlf = true;
let _ = sb.append_line("-----BEGIN PKCS7-----", b_crlf);
let _ = sb.append_line("MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggH0MIIB8AIBADCBrDCBlzELMAkGA1UEBhMCR0Ix", b_crlf);
let _ = sb.append_line("GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR", b_crlf);
let _ = sb.append_line("Q09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0", b_crlf);
let _ = sb.append_line("aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEB6M1ZwZdZU7LrAIdurulmUwOAYJKoZIhvcNAQEHMCug", b_crlf);
let _ = sb.append_line("DzANBglghkgBZQMEAgEFAKEYMBYGCSqGSIb3DQEBCDAJBgUrDgMCGgUABIIBAK/BZG/iXJ8az7zL", b_crlf);
let _ = sb.append_line("8EQ77mc+oDPQ4w1hyytK2ip4djkPVvTfYhcoDQ+G/DBU+urJfrVBi5H9gmpXwYyfKlyUxBVRVEJl", b_crlf);
let _ = sb.append_line("V/V5QQi4JmNTFbmgWh5tp9zDS98l6A2Va4Zs0Wy/owGLfvwitlxd1dsfVAV2hmBYS24BMpNcty5/", b_crlf);
let _ = sb.append_line("0atcKYmSou13G78ztTKdMy1tECgZy8kerMsPdDQbSxEZkT3KpQ8C5uEQqYF3bIVaeZzha/Ywieh/", b_crlf);
let _ = sb.append_line("tvO0T4aAmeJufwkNdVECmU7kuhnNaVPXknFl7jeibTl6zA/VcJKBKcIYT9FRC7KjdooI8q+jtQ/V", b_crlf);
let _ = sb.append_line("k6RP4POaowkFg1QWRPEWeqIwTAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBAgQQEEFQduqeJqXQXzy4", b_crlf);
let _ = sb.append_line("JpkoDoAgdldJDB9zEkpMpgr5/fR2iLvh5kC6BPfhOYjsawBY4Ok=", b_crlf);
let _ = sb.append_line("-----END PKCS7-----", b_crlf);

let decrypt = chilkat::Crypt2::new();
decrypt.set_crypt_algorithm("pki");

// Use the same cert + private key from the PFX above.
// For decryption, we need the private key.  Given that the certificate was loaded from a PFX,
// we should already have it.
success = decrypt.set_decrypt_cert(&cert).is_ok();

decrypt.set_encoding_mode("base64");
let decrypted_text = decrypt.decrypt_string_enc(&sb.get_between("-----BEGIN PKCS7-----", "-----END PKCS7-----").unwrap_or_default()).unwrap_or_default();

println!("{}", decrypted_text);