Tcl

3DES Encryption, ECB, CBC modes

See more Encryption Examples

3DES encryption. The Chilkat encryption component supports Triple-DES in both ECB (Electronic Cookbook) and CBC (Cipher-Block Chaining) cipher modes. Tcl

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

# Specify 3DES for the encryption algorithm:
CkCrypt2_put_CryptAlgorithm $crypt "3des"

# CipherMode may be "ecb" or "cbc"
CkCrypt2_put_CipherMode $crypt "cbc"

# KeyLength must be 192.  3DES is technically 168-bits;
# the most-significant bit of each key byte is a parity bit,
# so we must indicate a KeyLength of 192, which includes
# the parity bits.
CkCrypt2_put_KeyLength $crypt 192

# The padding scheme determines the contents of the bytes
# that are added to pad the result to a multiple of the
# encryption algorithm's block size.  3DES has a block
# size of 8 bytes, so encrypted output is always
# a multiple of 8.
CkCrypt2_put_PaddingScheme $crypt 0

# EncodingMode specifies the encoding of the output for
# encryption, and the input for decryption.
# It may be "hex", "url", "base64", or "quoted-printable".
CkCrypt2_put_EncodingMode $crypt "hex"

# An initialization vector is required if using CBC or CFB modes.
# ECB mode does not use an IV.
# The length of the IV is equal to the algorithm's block size.
# It is NOT equal to the length of the key.
set ivHex "0001020304050607"
CkCrypt2_SetEncodedIV $crypt $ivHex "hex"

# The secret key must equal the size of the key.  For 
# 3DES, the key must be 24 bytes (i.e. 192-bits).
set keyHex "000102030405060708090A0B0C0D0E0F0001020304050607"
CkCrypt2_SetEncodedKey $crypt $keyHex "hex"

# Encrypt a string...
# The input string is 44 ANSI characters (i.e. 44 bytes), so
# the output should be 48 bytes (a multiple of 8).
# Because the output is a hex string, it should
# be 96 characters long (2 chars per byte).
set encStr [CkCrypt2_encryptStringENC $crypt "The quick brown fox jumps over the lazy dog."]
puts "$encStr"

# Now decrypt:
set decStr [CkCrypt2_decryptStringENC $crypt $encStr]
puts "$decStr"

delete_CkCrypt2 $crypt