Zig Requires Chilkat v11.0.0+

Generate RSA Key and Export to PKCS1 / PKCS8

See more RSA Examples

_LANGUAGE_ example code showing how to generate an RSA public/private key and save to PKCS1 and PKCS8 format files. In a PKCS1 or PKCS8 formatted file, the key is stored in binary ASN.1 format (and ASN.1 is itself written according to DER -- Distinguished Encoding Rules). A PEM file simply contains the binary ASN.1 base64 encoded and delimited by BEGIN/END lines. PKCS1 format files are never encrypted. PKCS8 can be encrypted or unencrypted. Public keys are never encrypted (there is no need). Private keys *should* always be encrypted - unless perhaps the unencrypted private key is obtained and itself stored in some sort of secure place. Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    const rsa = try chilkat.Rsa.init();
    defer rsa.deinit();

    // Generate a 2048-bit key.  Chilkat RSA supports
    // key sizes ranging from 512 bits to 8192 bits.
    const priv_key = try chilkat.PrivateKey.init();
    defer priv_key.deinit();
    rsa.genKey(2048, priv_key) catch {
        std.debug.print("{s}\n", .{try rsa.getLastErrorText(alloc)});
        return;
    };

    // Get the public key
    const pub_key = try chilkat.PublicKey.init();
    defer pub_key.deinit();
    priv_key.toPublicKey(pub_key) catch {};

    // Get the public key as a PKCS8 PEM string
    const pub_key_pem = try pub_key.getPem(alloc, false);
    std.debug.print("{s}\n", .{pub_key_pem});

    // Get the public key in PKCS8 format, in a Base64 encoded string.
    const pub_key_pkcs8_base64 = try pub_key.getEncoded(alloc, false, "base64");
    std.debug.print("{s}\n", .{pub_key_pkcs8_base64});

    // Get the public key in PKCS1 format, in a Base64 encoded string.
    const pub_key_pkcs1_base64 = try pub_key.getEncoded(alloc, true, "base64");
    std.debug.print("{s}\n", .{pub_key_pkcs1_base64});

    // Get the private key in a PKCS8 PEM string.
    const priv_key_pem = try priv_key.getPkcs8Pem(alloc);
    std.debug.print("{s}\n", .{priv_key_pem});

    // Get the private key in a PKCS8 encrypted PEM string.
    const priv_key_enc_pem = try priv_key.getPkcs8EncryptedPem(alloc, "myPassword");
    std.debug.print("{s}\n", .{priv_key_enc_pem});

    // Get the private key in PKCS1 Base64 format
    const priv_key_pkcs1_base64 = try priv_key.getPkcs1ENC(alloc, "base64");
    std.debug.print("{s}\n", .{priv_key_pkcs1_base64});

    // Get the private key in PKCS8 Base64 format
    const priv_key_pkcs8_base64 = try priv_key.getPkcs8ENC(alloc, "base64");
    std.debug.print("{s}\n", .{priv_key_pkcs8_base64});

    // Save to PKCS1 / PKCS8 / PEM files...

    // Save the public key to PKCS8 binary DER
    try pub_key.saveDerFile(false, "pubKey_pkcs8.der");

    // Save the public key to PKCS1 binary DER
    try pub_key.saveDerFile(true, "pubKey_pkcs1.der");

    // Save the private key to unencrypted binary PKCS1 DER.
    // Note: PKCS1 is never found in an encrypted format.
    try priv_key.savePkcs1File("privKey_pkcs1.der");

    // Save the private key to unencrypted binary PKCS8
    try priv_key.savePkcs8File("privKey_pkcs8.der");

    // Save the private key to encrypted binary PKCS8
    try priv_key.savePkcs8EncryptedFile("myPassword", "privKey_enc_pkcs8.der");

    // Save the private key to unencrypted PKCS8 PEM
    try priv_key.savePkcs8PemFile("privKey.pem");

    // Save the private key to encrypted PKCS8 PEM
    try priv_key.savePkcs8EncryptedPemFile("myPassword", "privKey_enc.pem");
}