(Android™) Duplicate OpensSSL to Encrypt a Signed File

This example duplicates the following:

openssl smime -encrypt –in SIGNED.P7M –outform der –binary –des3 -out ENCRYPTED.ENC OTHERPARTYCERTIFICATE.PEM

Note: Although "smime" is the OpenSSL command, it's not actually producing S/MIME. The arguments "-outform der -binary" indicates that the output is binary DER (i.e. the PKCS7 binary signature). The input file (in this case) is a .p7m opaque signature, but it can be any type of file. There is nothing special about the fact that the input is .p7m. It is treated exactly the same as any other type of file. From the standpoint of encryption, the input file is just a bunch of bytes that needs to be encrypted and emitted to a PKCS7 binary DER output.

Chilkat Android™ Downloads Android™ Java Libraries Android C/C++ Libraries

// Important: Don't forget to include the call to System.loadLibrary
// as shown at the bottom of this code sample.
package com.test;

import android.app.Activity;
import com.chilkatsoft.*;

import android.widget.TextView;
import android.os.Bundle;

public class SimpleActivity extends Activity {

  private static final String TAG = "Chilkat";

  // Called when the activity is first created.
  @Override
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkCrypt2 crypt = new CkCrypt2();

    // PKCS7 encryption only requires the certificate (which contains the public key).
    // Load the certificate..

    // The cert.LoadFromFile method detects the file format.  You may load any type of file
    // containing a certificate..
    CkCert cert = new CkCert();
    boolean success = cert.LoadFromFile("qa_data/certs/otherPartyCert.pem");
    if (success != true) {
        Log.i(TAG, cert.lastErrorText());
        return;
        }

    // Indicate that we want Public Key Infrastructure (PKI) encryption.
    crypt.put_CryptAlgorithm("pki");

    // The desired encryption is "-des3", so choose "3des" for the underlying PKCS7 symmetric encryption:
    crypt.put_Pkcs7CryptAlg("3des");

    // Indicate the cert/public key to use for encryption:
    success = crypt.SetEncryptCert(cert);
    if (success != true) {
        Log.i(TAG, crypt.lastErrorText());
        return;
        }

    // Call a crypt.Encrypt* methods to encrypt to/from memory sources (i.e. strings or bytes)
    // or.. call CkEncryptFile to do file-to-file encryption.
    // In this case the file to be encrypted is "signed.p7m", but it could be any type of file..
    success = crypt.CkEncryptFile("somedir/signed.p7m","qa_output/encrypted.enc");
    if (success != true) {
        Log.i(TAG, crypt.lastErrorText());
        return;
        }

    Log.i(TAG, "Success.");

  }

  static {
      System.loadLibrary("chilkat");

      // Note: If the incorrect library name is passed to System.loadLibrary,
      // then you will see the following error message at application startup:
      //"The application <your-application-name> has stopped unexpectedly. Please try again."
  }
}