Zig

ScMinidriver - Get Public Keys from Smart Card Key Container

See more ScMinidriver Examples

Demonstrates how to query a key container on a smart card (or USB token) to get the public part of the private keys that are present. A key container can hold two separate private keys -- one in the "signature" position, and the other in the "key exchange" position. Zig

const std = @import("std");
const chilkat = @import("chilkat");

pub fn main(init: std.process.Init) !void {
    const alloc = init.arena.allocator();

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Chilkat recommends the following free tool for interactively examining the contents of your smart card
    // through the ScMinidriver interface:  MGTEK Tool for Minidriver enabled Smart Cards

    // Let's first look at our smart card..
    // Here's the view of our Gemalto (Thales) IDPrime MD T=0 smart card in the MGTEK tool:

    // (image:https://example-code.com/images/gemalto_idprime_after_key_import.JPG/endImage)

    const scmd = try chilkat.ScMinidriver.init();
    defer scmd.deinit();

    // First we need to acquire a context to the smart card in the reader where it is inserted.
    // Reader names (smart card readers or USB tokens) can be discovered
    // via List Readers or Find Smart Cards
    const reader_name = "Alcor Micro USB Smart Card Reader 0";
    scmd.acquireContext(reader_name) catch {
        std.debug.print("{s}\n", .{try scmd.getLastErrorText(alloc)});
        return;
    };

    // If successful, the name of the currently inserted smart card is available:
    std.debug.print("Card name: {s}\n", .{try scmd.getCardName(alloc)});

    // We likely shouldn't need to authenticate with the smart card (use a PIN) to simply get a public key,
    // so we can skip the PIN authenticatin step..

    // Let's get the key(s) present in Container #7.
    // In our case (shown in the image above), there is a private key in the "key exchange" position, but no key in the "signature" position.
    const pubkey_sig = try chilkat.PublicKey.init();
    defer pubkey_sig.deinit();
    const pubkey_kex = try chilkat.PublicKey.init();
    defer pubkey_kex.deinit();

    scmd.getContainerKeys(7, pubkey_sig, pubkey_kex) catch {
        std.debug.print("{s}\n", .{try scmd.getLastErrorText(alloc)});
        return;
    };

    if (pubkey_sig.getEmpty()) {
        std.debug.print("No signature key is present.\n", .{});
    } else {
        std.debug.print("Signature key:\n", .{});
        std.debug.print("{s}\n", .{try pubkey_sig.getPem(alloc, true)});
    }

    if (pubkey_kex.getEmpty()) {
        std.debug.print("No Key Exchange key is present.\n", .{});
    } else {
        std.debug.print("Key Exchange key:\n", .{});
        std.debug.print("{s}\n", .{try pubkey_kex.getPem(alloc, true)});
    }

    scmd.deleteContext() catch {};

    std.debug.print("Success.\n", .{});

    // Here's the output of the above sample code:

    // Card name: IDPrime MD T=0
    // No signature key is present.
    // Key Exchange key:
    // -----BEGIN RSA PUBLIC KEY-----
    // MIIBCgKCAQEAsXeRhM55P13FbpNcXAMR3olbw2Wa6keZIHu5YTZYUBTlYWId+pNi
    // wUz3zFIEo+0IfYR0H27ybIycQO+1IIzJofUFNMAL3tZps2OKPlsjuCPls6kXpXhv
    // /gvhux8LrCtp4PcKWqJ6QVOZKChc7WAx40qFWzHi57ueqRTv3x0kESqGg/VjsqyT
    // Evb55psJO2RsfhLT7+YVh3hImRM3RDaJdkTkPuOxeFyT6N7VXD09329sLuS3QkUb
    // E9zEKDnz9X3d8dEQdJhSI9ba5fxl8R7fu8pB67ElfzFml96X1jLFtzy1pzOT5Fc4
    // ROcaqlYckVzdBq9sxezm6MYmDBjNAcibRwIDAQAB
    // -----END RSA PUBLIC KEY-----
}