(Delphi DLL) Encrypt File to PKCS7 .p7m

Delphi DLL example to public-key encrypt a file creating a PKCS#7 .p7m file as output. Also demonstrates how to decrypt the .p7m to recover the original file.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Cert, Crypt2;

...

procedure TForm1.Button1Click(Sender: TObject);
var
crypt: HCkCrypt2;
encryptCert: HCkCert;
success: Boolean;
inFile: PWideChar;
outFile: PWideChar;
decrypt: HCkCrypt2;
pfxFilename: PWideChar;
pfxPassword: PWideChar;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

crypt := CkCrypt2_Create();

// Indicate the public-key encryption is to be used.
// Do this by setting the encryption algorithm equal 
// to "PKI" (an acroynm for public-key infrastructure).
CkCrypt2_putCryptAlgorithm(crypt,'PKI');

// Indicate the inner symmetric encryption algorithm to be used.
// possible values are "aes", "des", "3des", and "rc2".
// For this example, we'll use 256-bit AES encryption.
CkCrypt2_putPkcs7CryptAlg(crypt,'aes');
CkCrypt2_putKeyLength(crypt,256);

// To encrypt, only a certificate w/ public key is needed.
// (The certificate w/ private key is required for decryption.)

// The LoadFromFile method can load virtually any certificate format:
// 1. DER encoded binary X.509 (.CER)
// 2. Base-64 encoded X.509 (.CER)
// 3. Cryptographic Message Syntax Standard - PKCS #7 Certificates (.P7B)
// 4. PEM format
encryptCert := CkCert_Create();
success := CkCert_LoadFromFile(encryptCert,'/Users/chilkat/testData/cer/acme.cer');
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCert__lastErrorText(encryptCert));
    Exit;
  end;

// Tell the crypt object to use the certificate for encrypting:
CkCrypt2_AddEncryptCert(crypt,encryptCert);

// Encrypt a file, producing a .p7m as output.
// The input file is unchanged, the output .p7m contains the encrypted
// contents of the input file.
inFile := '/Users/chilkat/testData/pdf/sample.pdf';
outFile := '/Users/chilkat/testData/p7m/sample.pdf.p7m';
success := CkCrypt2_CkEncryptFile(crypt,inFile,outFile);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(crypt));
    Exit;
  end;

// For demonstration purposes, a different instance of the object will be used
// for decryption.
decrypt := CkCrypt2_Create();

// To decrypt, the certificate w/ private key is required.  A PFX (also known
// as PKCS#12) is a common secure container for certs and private keys.
pfxFilename := '/Users/chilkat/testData/pfx/acme.pfx';
pfxPassword := 'secret';

// Tell the component to look in the PFX file for certs and private keys.
success := CkCrypt2_AddPfxSourceFile(decrypt,pfxFilename,pfxPassword);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(decrypt));
    Exit;
  end;

// Tell the decrypt object that PKI (public key encryption) is to be used
// for decryptiong.
CkCrypt2_putCryptAlgorithm(decrypt,'PKI');
// There is no need to set the Pkcs7Alg or KeyLength because this information
// is contained within the .p7m

// Decrypt the .p7m
inFile := '/Users/chilkat/testData/p7m/sample.pdf.p7m';
outFile := '/Users/chilkat/testData/pdf/recovered.pdf';
success := CkCrypt2_CkDecryptFile(decrypt,inFile,outFile);
if (success = False) then
  begin
    Memo1.Lines.Add(CkCrypt2__lastErrorText(decrypt));
    Exit;
  end;

Memo1.Lines.Add('Success!');

CkCrypt2_Dispose(crypt);
CkCert_Dispose(encryptCert);
CkCrypt2_Dispose(decrypt);

end;