Lua Requires Chilkat v9.5.0.66+

Create JCEKS Containing Secret Keys

See more Java KeyStore (JKS) Examples

Demonstrates how to create a JCEKS keystore file containing symmetric secret keys (for AES, Blowfish, HMAC SHA25, ChaCha20, etc.) Lua

local chilkat = require("chilkat")

-- This example requires the Chilkat API to have been previously unlocked.
-- See Global Unlock Sample for sample code.

local jceks = chilkat.JavaKeyStore.new()

-- We'll need a pseudo-random number generator (PRNG) to generate symmetric keys.
local prng = chilkat.Prng.new()

-- Generate some keys..

-- 128-bit AES key (16 bytes)
local aesKey = prng:gen_random(16, "base64")

-- 256-bit Blowfish key (32 bytes)
local blowfishKey = prng:gen_random(32, "base64")

-- HMAC SHA256 key
-- (An HMAC key can be anything, and any length. We'll use the following string:
local hmacKey = "This is my HMAC key"

-- ChaCha20 256-bit
local chachaKey = prng:gen_random(32, "base64")

-- Add each secret key to the JCEKS
local encoding = "base64"
local password = "secret"
jceks:add_secret_key(aesKey, encoding, "AES", "my aes key", password)
jceks:add_secret_key(blowfishKey, encoding, "BLOWFISH", "my blowfish key", password)
-- For HMAC, we're using the us-ascii bytes for the key..
jceks:add_secret_key(hmacKey, "ascii", "HMAC_SHA256", "my hmac key", password)
jceks:add_secret_key(chachaKey, encoding, "CHACHA", "my chacha20 key", password)

local filePassword = "password"
-- Write the JCEKs to a file.
local success = jceks:to_file(filePassword, "qa_output/secretKeys.jceks")
if not success then
    print(jceks.last_error_text)
    return
end

-- We can also emit as a JWK Set..
local sbJson = chilkat.StringBuilder.new()
success = jceks:to_jwk_set("secret", sbJson)
if not success then
    print(jceks.last_error_text)
    return
end

-- Emit the JSON in pretty-printed (indented) form:
local json = chilkat.JsonObject.new()
json:load_sb(sbJson)
json.emit_compact = false
print(json:emit())

-- Output is:

-- {
--   "keys": [
--     {
--       "kty": "oct",
--       "alg": "AES",
--       "k": "vHekQQB0Gc1NvppapUTW2g",
--       "kid": "my aes key"
--     },
--     {
--       "kty": "oct",
--       "alg": "BLOWFISH",
--       "k": "qHsdXaJsXicVCZbK8l8hJQpYOa0GkiO9gsRK9WLtht8",
--       "kid": "my blowfish key"
--     },
--     {
--       "kty": "oct",
--       "alg": "HMAC_SHA256",
--       "k": "VGhpcyBpcyBteSBITUFDIGtleQ",
--       "kid": "my hmac key"
--     },
--     {
--       "kty": "oct",
--       "alg": "CHACHA",
--       "k": "yNv832U43C9BcWvaQAH2_rG-GwfmpgT5JBRllWGQY1o",
--       "kid": "my chacha20 key"
--     }
--   ]
-- }
--