(DataFlex) PBES2 Password-Based Encryption (PBE)

Demonstrates how to implement password-based encryption according to the PKCS #5 v2.0: Password-Based Cryptography Standard (published by RSA Laboratories). This example uses PBES2, which ise based on the PBKDF2 function and an underlying block cipher such as RC2, DES, etc.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoCrypt
    String sPlainText
    String sEncryptedText
    String sDecryptedText

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatCrypt2)) To hoCrypt
    If (Not(IsComObjectCreated(hoCrypt))) Begin
        Send CreateComObject of hoCrypt
    End

    // Set properties for PBES2 encryption:

    Set ComCryptAlgorithm Of hoCrypt To "pbes2"
    Set ComPbesPassword Of hoCrypt To "mySecretPassword"

    // Set the underlying PBE algorithm (and key length):
    Set ComPbesAlgorithm Of hoCrypt To "rc2"
    Set ComKeyLength Of hoCrypt To 128
    // Only required for the RC2 algorithm:
    Set ComRc2EffectiveKeyLength Of hoCrypt To 128

    // By definition, the block encryption algorithm (RC2 or whichever
    // was selected) will run in CBC mode.  Therefore, we need
    // an IV.  The IV is equal in length to the block size of the
    // algorithm.  RC2 has a block size of 8 bytes (regardless of
    // key length), so set the IV to some value that is 8 bytes 
    // in length:
    Send ComSetEncodedIV To hoCrypt "0000000000000000" "hex"

    // Give it some salt:
    Send ComSetEncodedSalt To hoCrypt "0102030405060708" "hex"

    // A higher iteration count makes the algorithm more
    // computationally expensive and therefore exhaustive
    // searches (for breaking the encryption) is more difficult:
    Set ComIterationCount Of hoCrypt To 1024

    // A hash algorithm needs to be set for PBES2:
    Set ComHashAlgorithm Of hoCrypt To "sha1"

    // Indicate that the encrypted bytes should be returned
    // as a hex string:
    Set ComEncodingMode Of hoCrypt To "hex"

    Move "To be encrypted." To sPlainText

    Get ComEncryptStringENC Of hoCrypt sPlainText To sEncryptedText

    Showln sEncryptedText

    // Now decrypt:
    Get ComDecryptStringENC Of hoCrypt sEncryptedText To sDecryptedText

    Showln sDecryptedText


End_Procedure