Rust Requires Chilkat v11.0.0+

RSA Encrypt Hash using SHA256 hash function and SHA1 mask function

See more RSA Examples

How can this Javascript be duplicated using Chilkat?

function a(e, t) {
                var r = s.pki.publicKeyFromPem(e)
                  , n = r.encrypt(t, "RSA-OAEP", {
                    md: s.md.sha256.create(),
                    mgf1: {
                        md: s.md.sha1.create()
                    }
                });
                return s.util.encode64(n)
            }

Note: The OAEP padding uses random bytes in the padding, and therefore each time encryption happens, even using the same data and key, the result will be different -- but still valid. One should not expect to get the same output.

Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let pubkey = chilkat::PublicKey::new();

let sb_pem = chilkat::StringBuilder::new();
let b_crlf = true;
let _ = sb_pem.append_line("-----BEGIN PUBLIC KEY-----", b_crlf);
let _ = sb_pem.append_line("MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33TqqLR3eeUmDtHS89qF", b_crlf);
let _ = sb_pem.append_line("3p4MP7Wfqt2Zjj3lZjLjjCGDvwr9cJNlNDiuKboODgUiT4ZdPWbOiMAfDcDzlOxA", b_crlf);
let _ = sb_pem.append_line("04DDnEFGAf+kDQiNSe2ZtqC7bnIc8+KSG/qOGQIVaay4Ucr6ovDkykO5Hxn7OU7s", b_crlf);
let _ = sb_pem.append_line("Jp9TP9H0JH8zMQA6YzijYH9LsupTerrY3U6zyihVEDXXOv08vBHk50BMFJbE9iwF", b_crlf);
let _ = sb_pem.append_line("wnxCsU5+UZUZYw87Uu0n4LPFS9BT8tUIvAfnRXIEWCha3KbFWmdZQZlyrFw0buUE", b_crlf);
let _ = sb_pem.append_line("f0YN3/Q0auBkdbDR/ES2PbgKTJdkjc/rEeM0TxvOUf7HuUNOhrtAVEN1D5uuxE1W", b_crlf);
let _ = sb_pem.append_line("SwIDAQAB", b_crlf);
let _ = sb_pem.append_line("-----END PUBLIC KEY-----", b_crlf);

// Load the public key object from the PEM. 
if pubkey.load_from_string(&sb_pem.get_as_string().unwrap_or_default()).is_err() {
    println!("{}", pubkey.last_error_text());
    return;
}

let original_data = "This is the original data to be SHA-256 hashed and RSA encrypted.".to_string();

// First we SHA-256 hash the original data to get the hash in base64 format:
let crypt = chilkat::Crypt2::new();
crypt.set_hash_algorithm("SHA-256");
crypt.set_encoding_mode("base64");
let hash_base64 = crypt.hash_string_enc(&original_data).unwrap_or_default();

// Setup RSA to use OAEP padding with SHA-1 for the mask function.
let rsa = chilkat::Rsa::new();
rsa.set_pkcs_padding(false);
rsa.set_oaep_hash("SHA256");
let _ = rsa.use_public_key(&pubkey);
rsa.set_encoding_mode("base64");

// We can provide a binary encoding mode, such as "base64", "hex", "base64url", etc.
// for the Charset property.   The Charset property was previously limited to character encodings, such as
// "utf-8", "iso-8859-1", etc.  If a binary encoding is used, then the string passed in is decoded to the binary
// bytes as indicated.  (If an actual charset, such as "utf-8" is used, then the input string is converted to the
// byte representation of the charset, and then encrypted.)

// Given that a hash is composed of non-text binary bytes, we'll set the Charset property equal to "base64" 
// (because we have the base64 hash from above).
rsa.set_charset("base64");

// Note: The OAEP padding uses random bytes in the padding, and therefore each time encryption happens,
// even using the same data and key, the result will be different --  but still valid.  One should not expect
// to get the same output.
let b_use_private_key = false;
let Ok(encrypted_str) = rsa.encrypt_string_enc(&hash_base64, b_use_private_key) else {
    println!("{}", rsa.last_error_text());
    return;
};

println!("Base64 RSA encrypted output: {}", encrypted_str);