(Classic ASP) Create JCEKS Containing Secret Keys

Demonstrates how to create a JCEKS keystore file containing symmetric secret keys (for AES, Blowfish, HMAC SHA25, ChaCha20, etc.)

This example requires Chilkat v9.5.0.66 or greater.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' IMPORTANT: This example requires Chilkat v9.5.0.66 or greater.

' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.JavaKeyStore")
set jceks = Server.CreateObject("Chilkat.JavaKeyStore")

' We'll need a pseudo-random number generator (PRNG) to generate symmetric keys.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Prng")
set prng = Server.CreateObject("Chilkat.Prng")

' Generate some keys..

' 128-bit AES key (16 bytes)
aesKey = prng.GenRandom(16,"base64")

' 256-bit Blowfish key (32 bytes)
blowfishKey = prng.GenRandom(32,"base64")

' HMAC SHA256 key
' (An HMAC key can be anything, and any length. We'll use the following string:
hmacKey = "This is my HMAC key"

' ChaCha20 256-bit
chachaKey = prng.GenRandom(32,"base64")

' Add each secret key to the JCEKS
encoding = "base64"
password = "secret"
success = jceks.AddSecretKey(aesKey,encoding,"AES","my aes key",password)
success = jceks.AddSecretKey(blowfishKey,encoding,"BLOWFISH","my blowfish key",password)
' For HMAC, we're using the us-ascii bytes for the key..
success = jceks.AddSecretKey(hmacKey,"ascii","HMAC_SHA256","my hmac key",password)
success = jceks.AddSecretKey(chachaKey,encoding,"CHACHA","my chacha20 key",password)

filePassword = "password"
' Write the JCEKs to a file.
success = jceks.ToFile(filePassword,"qa_output/secretKeys.jceks")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( jceks.LastErrorText) & "</pre>"
    Response.End
End If

' We can also emit as a JWK Set..
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.StringBuilder")
set sbJson = Server.CreateObject("Chilkat.StringBuilder")
success = jceks.ToJwkSet("secret",sbJson)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( jceks.LastErrorText) & "</pre>"
    Response.End
End If

' Emit the JSON in pretty-printed (indented) form:
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.JsonObject")
set json = Server.CreateObject("Chilkat.JsonObject")
success = json.LoadSb(sbJson)
json.EmitCompact = 0
Response.Write "<pre>" & Server.HTMLEncode( json.Emit()) & "</pre>"

' Output is:

' { 
'   "keys": [
'     { 
'       "kty": "oct",
'       "alg": "AES",
'       "k": "vHekQQB0Gc1NvppapUTW2g",
'       "kid": "my aes key"
'     },
'     { 
'       "kty": "oct",
'       "alg": "BLOWFISH",
'       "k": "qHsdXaJsXicVCZbK8l8hJQpYOa0GkiO9gsRK9WLtht8",
'       "kid": "my blowfish key"
'     },
'     { 
'       "kty": "oct",
'       "alg": "HMAC_SHA256",
'       "k": "VGhpcyBpcyBteSBITUFDIGtleQ",
'       "kid": "my hmac key"
'     },
'     { 
'       "kty": "oct",
'       "alg": "CHACHA",
'       "k": "yNv832U43C9BcWvaQAH2_rG-GwfmpgT5JBRllWGQY1o",
'       "kid": "my chacha20 key"
'     }
'   ]
' }
' 

%>
</body>
</html>