Xbase++ Requires Chilkat v11.0.0+

PKCS11 Import an Existing RSA Public Key onto the HSM

See more PKCS11 Examples

Demonstrates how to import an existing RSA Public Key onto a smart card or token.

Note: This example requires Chilkat v9.5.0.96 or later.

Xbase++

LOCAL nSuccess
LOCAL oPkcs11
LOCAL cPin
LOCAL nUserType
LOCAL oRsa
LOCAL oPrivKey
LOCAL oXml
LOCAL oPubKey
LOCAL oAttrs
LOCAL nObjHandle

nSuccess := 0

//  This example requires the Chilkat API to have been previously unlocked.
//  See Global Unlock Sample for sample code.

//  Note: Chilkat's PKCS11 implementation runs on Windows, Linux, Mac OS X, and other supported operating systems.

oPkcs11 := CreateObject("Chilkat.Pkcs11")

//  Use the PKCS11 driver (.dll, .so, .dylib) for your particular HSM.
//  (The format of the path will change with the operating system.  Obviously, "C:/" is not used on non-Windows systems.
oPkcs11:SharedLibPath := "C:/Program Files (x86)/Gemalto/IDGo 800 PKCS#11/IDPrimePKCS1164.dll"

//  Establish a logged-on session.
cPin := "0000"
nUserType := 1
nSuccess := oPkcs11:QuickSession(nUserType, cPin)
IF (nSuccess == 0)
    ? oPkcs11:LastErrorText
    oPkcs11:destroy()
    RETURN
ENDIF

//  Generate a new 2048-bit RSA key.
oRsa := CreateObject("Chilkat.Rsa")
oPrivKey := CreateObject("Chilkat.PrivateKey")
nSuccess := oRsa:GenKey(2048, oPrivKey)
IF (nSuccess == 0)
    ? oRsa:LastErrorText
    oPkcs11:destroy()
    oRsa:destroy()
    oPrivKey:destroy()
    RETURN
ENDIF

//  Get the public key information as XML, so we can access the modulus and exponent.
oXml := CreateObject("Chilkat.Xml")
oPubKey := CreateObject("Chilkat.PublicKey")
oPrivKey:ToPublicKey(oPubKey)
oXml:LoadXml(oPubKey:GetXml())

oAttrs := CreateObject("Chilkat.JsonObject")
//  Specify the type of object, and the type of key.
oAttrs:UpdateString("class", "CKO_PUBLIC_KEY")
oAttrs:UpdateString("key_type", "CKK_RSA")
//  Add an optional label if desired.
oAttrs:UpdateString("label", "RSA Public Key 1")
//  Allow the key to be use for verify, wrapping, and encryption operations.
oAttrs:UpdateBool("verify", 1)
oAttrs:UpdateBool("wrap", 1)
oAttrs:UpdateBool("encrypt", 1)

//  Make this a session-only public key.
//  To store the public key on the token so that it persists after the PKCS11 session, set token = 1.
oAttrs:UpdateBool("token", 0)

//  Provide the RSA public key material
oAttrs:UpdateString("modulus", oXml:GetChildContent("Modulus"))
oAttrs:UpdateString("public_exponent", oXml:GetChildContent("Exponent"))

//  Create the RSA public key.
//  Returns the PKCS11 object handle of the created key.
nObjHandle := oPkcs11:CreatePkcs11Object(oAttrs)
IF (nObjHandle == 0)
    ? oPkcs11:LastErrorText
    ? "Failed."
ELSE
    ? "PKCS11 object handle = " + Str(nObjHandle)
    ? "Successfully imported an RSA key.."
ENDIF

oPkcs11:Logout()
oPkcs11:CloseSession()

oPkcs11:destroy()
oRsa:destroy()
oPrivKey:destroy()
oXml:destroy()
oPubKey:destroy()
oAttrs:destroy()