Rust

RSA Sign utf-8 Bytes of String to get Base64 RSA Signature

See more Apple Keychain Examples

Demonstrates how RSA sign the utf-8 byte representation of a string to get the signature in base64 format. Rust

// Assuming the smartcard/USB token is installed with the correct drivers from the manufacturer,
// this code can work on multiple platforms including Windows, MacOS, Linux, and iOS.

// Chilkat automatically detects and determines the way in which the HSM is used,
// which can be by PKCS11, Apple Keychain, Microsoft CNG / Crypto API, or ScMinidriver.

let cert = chilkat::Cert::new();

// Set the token/smartcard PIN prior to loading.
cert.set_smart_card_pin("123456");

// Specify the certificate by its common name.
if cert.load_from_smartcard("cn=chilkat-rsa-2048").is_err() {
    println!("{}", cert.last_error_text());
    return;
}

println!("Signing with cert: {}", cert.subject_cn());

// Create a string to be hashed and signed.
let sb = chilkat::StringBuilder::new();
let crlf_line_ending = true;
for i in 0..=10 {
    let _ = sb.append_line("This is a test.", crlf_line_ending);
}

let rsa = chilkat::Rsa::new();

// Use the certificate's private key for signing.
if rsa.set_x509_cert(&cert, true).is_err() {
    println!("{}", rsa.last_error_text());
    return;
}

// Sign the SHA-256 hash of the utf-8 byte representation of the contents of sb
// Return the signature in base64 format.
rsa.set_encoding_mode("base64");
rsa.set_charset("utf-8");
let string_to_sign = sb.get_as_string().unwrap_or_default();
let Ok(sig_base64) = rsa.sign_string_enc(&string_to_sign, "sha256") else {
    println!("{}", rsa.last_error_text());
    return;
};

println!("RSA signature as base64: {}", sig_base64);