(Classic ASP) Generate RSA Key and Export to PKCS1 / PKCS8

Classic ASP example code showing how to generate an RSA public/private key and save to PKCS1 and PKCS8 format files. In a PKCS1 or PKCS8 formatted file, the key is stored in binary ASN.1 format (and ASN.1 is itself written according to DER -- Distinguished Encoding Rules). A PEM file simply contains the binary ASN.1 base64 encoded and delimited by BEGIN/END lines. PKCS1 format files are never encrypted. PKCS8 can be encrypted or unencrypted. Public keys are never encrypted (there is no need). Private keys *should* always be encrypted - unless perhaps the unencrypted private key is obtained and itself stored in some sort of secure place.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This example assumes the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Rsa")
set rsa = Server.CreateObject("Chilkat.Rsa")

' Generate a 2048-bit key.  Chilkat RSA supports
' key sizes ranging from 512 bits to 8192 bits.
success = rsa.GenerateKey(2048)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( rsa.LastErrorText) & "</pre>"
    Response.End
End If

' Get the public and private key parts:
' pubKey is a Chilkat.PublicKey
Set pubKey = rsa.ExportPublicKeyObj()
' privKey is a Chilkat.PrivateKey
Set privKey = rsa.ExportPrivateKeyObj()

' Get the public key as a PKCS8 PEM string
pubKeyPem = pubKey.GetPem(0)
Response.Write "<pre>" & Server.HTMLEncode( pubKeyPem) & "</pre>"

' Get the public key in PKCS8 format, in a Base64 encoded string.
pubKeyPkcs8Base64 = pubKey.GetEncoded(0,"base64")
Response.Write "<pre>" & Server.HTMLEncode( pubKeyPkcs8Base64) & "</pre>"

' Get the public key in PKCS1 format, in a Base64 encoded string.
pubKeyPkcs1Base64 = pubKey.GetEncoded(1,"base64")
Response.Write "<pre>" & Server.HTMLEncode( pubKeyPkcs1Base64) & "</pre>"

' Get the private key in a PKCS8 PEM string.
privKeyPem = privKey.GetPkcs8Pem()
Response.Write "<pre>" & Server.HTMLEncode( privKeyPem) & "</pre>"

' Get the private key in a PKCS8 encrypted PEM string.
privKeyEncPem = privKey.GetPkcs8EncryptedPem("myPassword")
Response.Write "<pre>" & Server.HTMLEncode( privKeyEncPem) & "</pre>"

' Get the private key in PKCS1 Base64 format
privKeyPkcs1Base64 = privKey.GetPkcs1ENC("base64")
Response.Write "<pre>" & Server.HTMLEncode( privKeyPkcs1Base64) & "</pre>"

' Get the private key in PKCS8 Base64 format
privKeyPkcs8Base64 = privKey.GetPkcs8ENC("base64")
Response.Write "<pre>" & Server.HTMLEncode( privKeyPkcs8Base64) & "</pre>"

' Save to PKCS1 / PKCS8 / PEM files...

' Save the public key to PKCS8 binary DER
success = pubKey.SaveDerFile(0,"pubKey_pkcs8.der")

' Save the public key to PKCS1 binary DER
success = pubKey.SaveDerFile("pubKey_pkcs1.der")

' Save the private key to unencrypted binary PKCS1 DER.
' Note: PKCS1 is never found in an encrypted format. 
success = privKey.SavePkcs1File("privKey_pkcs1.der")

' Save the private key to unencrypted binary PKCS8
success = privKey.SavePkcs8File("privKey_pkcs8.der")

' Save the private key to encrypted binary PKCS8
success = privKey.SavePkcs8EncryptedFile("myPassword","privKey_enc_pkcs8.der")

' Save the private key to unencrypted PKCS8 PEM
success = privKey.SavePkcs8PemFile("privKey.pem")

' Save the private key to encrypted PKCS8 PEM
success = privKey.SavePkcs8EncryptedPemFile("myPassword","privKey_enc.pem")


%>
</body>
</html>