Lua

Encrypt/Decrypt using PFX to produce -----BEGIN PKCS7----- ... -----END PKCS7-----

See more Encryption Examples

First we encrypt using a certificate + public key to produce output such as:

-----BEGIN PKCS7-----
MIIHPwYJKoZIhvcNAQcEoIIHMDCCBywC ...
...
...
-----END PKCS7-----

Then we decrypt using the cert + private key. Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local crypt = chilkat.Crypt2.new()

-- Specify the encryption to be used.
-- "pki" indicates "Public Key Infrastructure" and will create a PKCS7 encrypted (enveloped) message.
crypt.crypt_algorithm = "pki"
crypt.pkcs7_crypt_alg = "aes"
crypt.key_length = 128
crypt.oaep_hash = "sha256"
crypt.oaep_padding = true

-- A certificate is needed as the encryption key.
-- Althought the PFX contains the associated private key, we don't need it for encryption.
-- (A certificate usually contains the public key by default.)
local cert = chilkat.Cert.new()
local success = cert:load_pfx_file("qa_data/pfx/cert_test123.pfx", "test123")
if not success then
    print(cert.last_error_text)
    return
end

-- Tell the crypt object to use the certificate.
crypt:set_encrypt_cert(cert)

local toBeEncrypted = "This string is to be encrypted."

-- Get the result in multi-line BASE64 MIME format.
crypt.encoding_mode = "base64_mime"

local encryptedStr = crypt:encrypt_string_enc(toBeEncrypted)
if not success then
    print(crypt.last_error_text)
    return
end

-- Make a "-----BEGIN PKCS7-----" ... "-----END PKCS7-----" sandwich...
local sb = chilkat.StringBuilder.new()
sb:append_line("-----BEGIN PKCS7-----", true)
sb:append(encryptedStr)
sb:append_line("-----END PKCS7-----", true)

local outStr = sb:get_as_string()

print(outStr)

-- Sample output:

-- -----BEGIN PKCS7-----
-- MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggH0MIIB8AIBADCBrDCBlzELMAkGA1UEBhMCR0Ix
-- GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR
-- Q09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0
-- aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEB6M1ZwZdZU7LrAIdurulmUwOAYJKoZIhvcNAQEHMCug
-- DzANBglghkgBZQMEAgEFAKEYMBYGCSqGSIb3DQEBCDAJBgUrDgMCGgUABIIBAK/BZG/iXJ8az7zL
-- 8EQ77mc+oDPQ4w1hyytK2ip4djkPVvTfYhcoDQ+G/DBU+urJfrVBi5H9gmpXwYyfKlyUxBVRVEJl
-- V/V5QQi4JmNTFbmgWh5tp9zDS98l6A2Va4Zs0Wy/owGLfvwitlxd1dsfVAV2hmBYS24BMpNcty5/
-- 0atcKYmSou13G78ztTKdMy1tECgZy8kerMsPdDQbSxEZkT3KpQ8C5uEQqYF3bIVaeZzha/Ywieh/
-- tvO0T4aAmeJufwkNdVECmU7kuhnNaVPXknFl7jeibTl6zA/VcJKBKcIYT9FRC7KjdooI8q+jtQ/V
-- k6RP4POaowkFg1QWRPEWeqIwTAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBAgQQEEFQduqeJqXQXzy4
-- JpkoDoAgdldJDB9zEkpMpgr5/fR2iLvh5kC6BPfhOYjsawBY4Ok=
-- -----END PKCS7-----

-- ----------------------------------------------------------------------------------------
-- Let's Decrypt the above string.

-- Start with what was produced above..
sb:clear()
local bCrlf = true
sb:append_line("-----BEGIN PKCS7-----", bCrlf)
sb:append_line("MIICXAYJKoZIhvcNAQcDoIICTTCCAkkCAQAxggH0MIIB8AIBADCBrDCBlzELMAkGA1UEBhMCR0Ix", bCrlf)
sb:append_line("GzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4GA1UEBxMHU2FsZm9yZDEaMBgGA1UEChMR", bCrlf)
sb:append_line("Q09NT0RPIENBIExpbWl0ZWQxPTA7BgNVBAMTNENPTU9ETyBSU0EgQ2xpZW50IEF1dGhlbnRpY2F0", bCrlf)
sb:append_line("aW9uIGFuZCBTZWN1cmUgRW1haWwgQ0ECEB6M1ZwZdZU7LrAIdurulmUwOAYJKoZIhvcNAQEHMCug", bCrlf)
sb:append_line("DzANBglghkgBZQMEAgEFAKEYMBYGCSqGSIb3DQEBCDAJBgUrDgMCGgUABIIBAK/BZG/iXJ8az7zL", bCrlf)
sb:append_line("8EQ77mc+oDPQ4w1hyytK2ip4djkPVvTfYhcoDQ+G/DBU+urJfrVBi5H9gmpXwYyfKlyUxBVRVEJl", bCrlf)
sb:append_line("V/V5QQi4JmNTFbmgWh5tp9zDS98l6A2Va4Zs0Wy/owGLfvwitlxd1dsfVAV2hmBYS24BMpNcty5/", bCrlf)
sb:append_line("0atcKYmSou13G78ztTKdMy1tECgZy8kerMsPdDQbSxEZkT3KpQ8C5uEQqYF3bIVaeZzha/Ywieh/", bCrlf)
sb:append_line("tvO0T4aAmeJufwkNdVECmU7kuhnNaVPXknFl7jeibTl6zA/VcJKBKcIYT9FRC7KjdooI8q+jtQ/V", bCrlf)
sb:append_line("k6RP4POaowkFg1QWRPEWeqIwTAYJKoZIhvcNAQcBMB0GCWCGSAFlAwQBAgQQEEFQduqeJqXQXzy4", bCrlf)
sb:append_line("JpkoDoAgdldJDB9zEkpMpgr5/fR2iLvh5kC6BPfhOYjsawBY4Ok=", bCrlf)
sb:append_line("-----END PKCS7-----", bCrlf)

local decrypt = chilkat.Crypt2.new()
decrypt.crypt_algorithm = "pki"

-- Use the same cert + private key from the PFX above.
-- For decryption, we need the private key.  Given that the certificate was loaded from a PFX,
-- we should already have it.
success = decrypt:set_decrypt_cert(cert)

decrypt.encoding_mode = "base64"
local decryptedText = decrypt:decrypt_string_enc(sb:get_between("-----BEGIN PKCS7-----", "-----END PKCS7-----"))

print(decryptedText)