(Chilkat2-Python) RSA Encrypt Randomly Generated AES Key

Demonstrates how to RSA encrypt a randomly generated AES key.

Chilkat2 Python Downloads install with pip pip3 install chilkat2 or download... Python Module for Windows, Linux, Alpine Linux, MacOS, Solaris

import sys
import chilkat2

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# First generate a 256-bit AES key (32 bytes).
prng = chilkat2.Prng()
bdAesKey = chilkat2.BinData()
success = prng.GenRandomBd(32,bdAesKey)

# Use a public key from a certificate for RSA encryption.
cert = chilkat2.Cert()

success = cert.LoadFromFile("qa_data/pem/mf_public_rsa.pem")
if (success == False):
    print(cert.LastErrorText)
    sys.exit()

# pubKey is a CkPublicKey
pubKey = cert.ExportPublicKey()
if (cert.LastMethodSuccess != True):
    print(cert.LastErrorText)
    sys.exit()

rsa = chilkat2.Rsa()
success = rsa.ImportPublicKeyObj(pubKey)
if (success == False):
    print(rsa.LastErrorText)
    sys.exit()

# RSA encrypt our 32-byte AES key.
# The contents of bdAesKey are replaced with result of the RSA encryption.
success = rsa.EncryptBd(bdAesKey,False)
if (success == False):
    print(rsa.LastErrorText)
    sys.exit()

# Return the result as a base64 string
encryptedAesKey = bdAesKey.GetEncoded("base64")

print("encrypted AES key = " + encryptedAesKey)