Dart

ClickBank Decrypt Instant Notification

See more ClickBank Examples

Demonstrates how to decrypt a ClickBank instant notification. See Instant Notification Service for more information and alternative code snippets. Dart

import 'package:chilkat/chilkat.dart';

void main() {
  // This example assumes the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // secret key from your ClickBank account
  final secretKey = 'MY_SECRET_KEY';

  final jsonStr = '{"notification":"BASE64_NOTIFICATION","iv":"BASE64_IV"}';

  final json = CkJsonObject();
  json.load(jsonStr);

  // Get the encrypted notification (binary) and IV from the JSON.
  final bdNotif = CkBinData();
  final bdIv = CkBinData();

  bdNotif.appendEncoded(json.stringOf('notification'), 'base64');
  bdIv.appendEncoded(json.stringOf('iv'), 'base64');

  // Get an SHA1 digest (as a hex string) of the secret key.
  // A SHA1 digest is 20 bytes.  Therefore the hex string is 40 chars.
  // Treat each us-ascii char as a binary byte of the secret key.
  // 256-bit AES needs a 256-bit key, which is 32-bytes.  Therefore
  // use the 1st 32 us-ascii chars of the hex SHA1 as the AES secret key.

  final crypt = CkCrypt2();
  // Because we're using the hex string as the actual AES key, it matters whether the hex is uppercase or lowercase.
  // We want lowercase.
  crypt.encodingMode = 'hex_lower';
  crypt.hashAlgorithm = 'sha1';
  final hexSha1 = crypt.hashStringENC(secretKey);
  print(hexSha1);

  // Treat the hex string as binary data for the AES key..
  final bdKey = CkBinData();
  bdKey.appendString(hexSha1, 'us-ascii');
  bdKey.removeChunk(32, 8);

  crypt.keyLength = 256;
  crypt.cryptAlgorithm = 'aes';
  crypt.cipherMode = 'cbc';

  // We can use any encoding because were just getting the binary bytes in an encoding, and then setting from the same encoding.
  // We'll just use base64..
  crypt.setEncodedIV(bdIv.getEncoded('base64'), 'base64');
  crypt.setEncodedKey(bdKey.getEncoded('base64'), 'base64');

  crypt.decryptBd(bdNotif);
  print('Decrypted: ${bdNotif.getString('utf-8')}');
}