(Classic ASP) Yubikey RSA Encrypt/Decrypt

See more RSA Examples

Demonstrates how to do RSA decryption using a private key stored on a Yubikey (or other USB token or smartcard).

Note: RSA encryption uses the public key, which is freely exportable and does not need to occur on the token/smartcard.

Note: This example requires Chilkat v10.1.3 or greater.

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This example assumes you have a certificate with private key on the Yubikey token.
' When doing simple RSA encryption/decryption, we don't actually need the certificate,
' but we'll be using the private key associated with the certificate.
' 
' The sensitive/secret material that needs to be kept private is the private key.
' The certificate itself and the public key can be freely shared.
' 

' We're going to encrypt and decrypt 32-bytes of data.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.BinData")
set bd = Server.CreateObject("Chilkat.BinData")
success = bd.AppendEncoded("000102030405060708090A0B0C0D0E0F","hex")
success = bd.AppendEncoded("000102030405060708090A0B0C0D0E0F","hex")

' Let's get the desired cert.
' For this example, a self-signed certificate with a 2048-bit RSA key was generated in slot 9A.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Cert")
set cert = Server.CreateObject("Chilkat.Cert")

' Force Chilkat to use PKCS11 over ScMinidriver (if on Windows) and Apple Keychain (if on MacOS)
cert.UncommonOptions = "NoScMinidriver,NoAppleKeychain"

cert.SmartCardPin = "123456"

success = cert.LoadFromSmartcard("cn=chilkat_test_2048")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

' RSA encrypt using the public key.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Rsa")
set rsa = Server.CreateObject("Chilkat.Rsa")

' Provide the RSA object with the certificate on the Yubkey.
success = rsa.SetX509Cert(cert,1)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( rsa.LastErrorText) & "</pre>"
    Response.End
End If

' RSA encrypt using the public key.
usePrivateKey = 0
success = rsa.EncryptBd(bd,usePrivateKey)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( rsa.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( "RSA Encrypted Output in Hex:") & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( bd.GetEncoded("hex")) & "</pre>"

' Now let's decrypt, using the private key on the Yubikey.
usePrivateKey = 1
success = rsa.DecryptBd(bd,usePrivateKey)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( rsa.LastErrorText) & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( "RSA Decrypted Output in Hex:") & "</pre>"
Response.Write "<pre>" & Server.HTMLEncode( bd.GetEncoded("hex")) & "</pre>"

%>
</body>
</html>