(Delphi ActiveX) Create JCEKS Containing Secret Keys

Demonstrates how to create a JCEKS keystore file containing symmetric secret keys (for AES, Blowfish, HMAC SHA25, ChaCha20, etc.)

This example requires Chilkat v9.5.0.66 or greater.

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
jceks: TChilkatJavaKeyStore;
prng: TChilkatPrng;
aesKey: WideString;
blowfishKey: WideString;
hmacKey: WideString;
chachaKey: WideString;
encoding: WideString;
password: WideString;
filePassword: WideString;
success: Integer;
sbJson: TChilkatStringBuilder;
json: TChilkatJsonObject;

begin
// IMPORTANT: This example requires Chilkat v9.5.0.66 or greater.

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

jceks := TChilkatJavaKeyStore.Create(Self);

// We'll need a pseudo-random number generator (PRNG) to generate symmetric keys.
prng := TChilkatPrng.Create(Self);

// Generate some keys..

// 128-bit AES key (16 bytes)
aesKey := prng.GenRandom(16,'base64');

// 256-bit Blowfish key (32 bytes)
blowfishKey := prng.GenRandom(32,'base64');

// HMAC SHA256 key
// (An HMAC key can be anything, and any length. We'll use the following string:
hmacKey := 'This is my HMAC key';

// ChaCha20 256-bit
chachaKey := prng.GenRandom(32,'base64');

// Add each secret key to the JCEKS
encoding := 'base64';
password := 'secret';
jceks.AddSecretKey(aesKey,encoding,'AES','my aes key',password);
jceks.AddSecretKey(blowfishKey,encoding,'BLOWFISH','my blowfish key',password);
// For HMAC, we're using the us-ascii bytes for the key..
jceks.AddSecretKey(hmacKey,'ascii','HMAC_SHA256','my hmac key',password);
jceks.AddSecretKey(chachaKey,encoding,'CHACHA','my chacha20 key',password);

filePassword := 'password';
// Write the JCEKs to a file.
success := jceks.ToFile(filePassword,'qa_output/secretKeys.jceks');
if (success <> 1) then
  begin
    Memo1.Lines.Add(jceks.LastErrorText);
    Exit;
  end;

// We can also emit as a JWK Set..
sbJson := TChilkatStringBuilder.Create(Self);
success := jceks.ToJwkSet('secret',sbJson.ControlInterface);
if (success <> 1) then
  begin
    Memo1.Lines.Add(jceks.LastErrorText);
    Exit;
  end;

// Emit the JSON in pretty-printed (indented) form:
json := TChilkatJsonObject.Create(Self);
json.LoadSb(sbJson.ControlInterface);
json.EmitCompact := 0;
Memo1.Lines.Add(json.Emit());

// Output is:

// { 
//   "keys": [
//     { 
//       "kty": "oct",
//       "alg": "AES",
//       "k": "vHekQQB0Gc1NvppapUTW2g",
//       "kid": "my aes key"
//     },
//     { 
//       "kty": "oct",
//       "alg": "BLOWFISH",
//       "k": "qHsdXaJsXicVCZbK8l8hJQpYOa0GkiO9gsRK9WLtht8",
//       "kid": "my blowfish key"
//     },
//     { 
//       "kty": "oct",
//       "alg": "HMAC_SHA256",
//       "k": "VGhpcyBpcyBteSBITUFDIGtleQ",
//       "kid": "my hmac key"
//     },
//     { 
//       "kty": "oct",
//       "alg": "CHACHA",
//       "k": "yNv832U43C9BcWvaQAH2_rG-GwfmpgT5JBRllWGQY1o",
//       "kid": "my chacha20 key"
//     }
//   ]
// }
// 
end;