AutoIt

Generate RSA Key and Export to PKCS1 / PKCS8

See more RSA Examples

_LANGUAGE_ example code showing how to generate an RSA public/private key and save to PKCS1 and PKCS8 format files. In a PKCS1 or PKCS8 formatted file, the key is stored in binary ASN.1 format (and ASN.1 is itself written according to DER -- Distinguished Encoding Rules). A PEM file simply contains the binary ASN.1 base64 encoded and delimited by BEGIN/END lines. PKCS1 format files are never encrypted. PKCS8 can be encrypted or unencrypted. Public keys are never encrypted (there is no need). Private keys *should* always be encrypted - unless perhaps the unencrypted private key is obtained and itself stored in some sort of secure place. AutoIt

Local $bSuccess = False

; This example assumes the Chilkat API to have been previously unlocked.
; See Global Unlock Sample for sample code.

$oRsa = ObjCreate("Chilkat.Rsa")

; Generate a 2048-bit key.  Chilkat RSA supports
; key sizes ranging from 512 bits to 8192 bits.
$oPrivKey = ObjCreate("Chilkat.PrivateKey")
$bSuccess = $oRsa.GenKey(2048,$oPrivKey)
If ($bSuccess = False) Then
    ConsoleWrite($oRsa.LastErrorText & @CRLF)
    Exit
EndIf

; Get the public key
$oPubKey = ObjCreate("Chilkat.PublicKey")
$oPrivKey.ToPublicKey($oPubKey)

; Get the public key as a PKCS8 PEM string
Local $sPubKeyPem = $oPubKey.GetPem(False)
ConsoleWrite($sPubKeyPem & @CRLF)

; Get the public key in PKCS8 format, in a Base64 encoded string.
Local $sPubKeyPkcs8Base64 = $oPubKey.GetEncoded(False,"base64")
ConsoleWrite($sPubKeyPkcs8Base64 & @CRLF)

; Get the public key in PKCS1 format, in a Base64 encoded string.
Local $sPubKeyPkcs1Base64 = $oPubKey.GetEncoded(True,"base64")
ConsoleWrite($sPubKeyPkcs1Base64 & @CRLF)

; Get the private key in a PKCS8 PEM string.
Local $sPrivKeyPem = $oPrivKey.GetPkcs8Pem()
ConsoleWrite($sPrivKeyPem & @CRLF)

; Get the private key in a PKCS8 encrypted PEM string.
Local $sPrivKeyEncPem = $oPrivKey.GetPkcs8EncryptedPem("myPassword")
ConsoleWrite($sPrivKeyEncPem & @CRLF)

; Get the private key in PKCS1 Base64 format
Local $sPrivKeyPkcs1Base64 = $oPrivKey.GetPkcs1ENC("base64")
ConsoleWrite($sPrivKeyPkcs1Base64 & @CRLF)

; Get the private key in PKCS8 Base64 format
Local $sPrivKeyPkcs8Base64 = $oPrivKey.GetPkcs8ENC("base64")
ConsoleWrite($sPrivKeyPkcs8Base64 & @CRLF)

; Save to PKCS1 / PKCS8 / PEM files...

; Save the public key to PKCS8 binary DER
$bSuccess = $oPubKey.SaveDerFile(False,"pubKey_pkcs8.der")

; Save the public key to PKCS1 binary DER
$bSuccess = $oPubKey.SaveDerFile("pubKey_pkcs1.der")

; Save the private key to unencrypted binary PKCS1 DER.
; Note: PKCS1 is never found in an encrypted format. 
$bSuccess = $oPrivKey.SavePkcs1File("privKey_pkcs1.der")

; Save the private key to unencrypted binary PKCS8
$bSuccess = $oPrivKey.SavePkcs8File("privKey_pkcs8.der")

; Save the private key to encrypted binary PKCS8
$bSuccess = $oPrivKey.SavePkcs8EncryptedFile("myPassword","privKey_enc_pkcs8.der")

; Save the private key to unencrypted PKCS8 PEM
$bSuccess = $oPrivKey.SavePkcs8PemFile("privKey.pem")

; Save the private key to encrypted PKCS8 PEM
$bSuccess = $oPrivKey.SavePkcs8EncryptedPemFile("myPassword","privKey_enc.pem")