(Tcl) Generate RSA Key and Sign a String

See more RSA Examples

Demonstrates how to generate a new RSA public/private key pair and use it to generate a signature for a string. The (binary) digital signature is returned as a hexidecimalized string.

Chilkat Tcl Extension Downloads

Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example assumes the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set rsa [new_CkRsa]

# Generate a 2048-bit RSA key.
set success [CkRsa_GenerateKey $rsa 2048]

# Return the signature in hex.
CkRsa_put_EncodingMode $rsa "hex"

set strData "This is the string to be signed."

# Sign the SHA256 hash of the string.
set hexSig [CkRsa_signStringENC $rsa $strData "sha256"]

puts "$hexSig"
puts [CkRsa_lastErrorText $rsa]

# Now verify the signature:
set success [CkRsa_VerifyStringENC $rsa $strData "sha256" $hexSig]
if {$success == 1} then {
    puts "Signature verified!"
} else {
    puts [CkRsa_lastErrorText $rsa]
}

# Try it with an invalid signature:
set success [CkRsa_VerifyStringENC $rsa $strData "sha256" "not a valid sig"]
if {$success == 1} then {
    puts "Signature verified!"
} else {
    puts [CkRsa_lastErrorText $rsa]
}

# Try it with invalid data:
set success [CkRsa_VerifyStringENC $rsa "Not the original data" "sha256" $hexSig]
if {$success == 1} then {
    puts "Signature verified!"
} else {
    puts [CkRsa_lastErrorText $rsa]
}

# Try it with the wrong hash algorithm:
set success [CkRsa_VerifyStringENC $rsa $strData "sha-1" $hexSig]
if {$success == 1} then {
    puts "Signature verified!"
} else {
    puts [CkRsa_lastErrorText $rsa]
}


delete_CkRsa $rsa