(Delphi DLL) List Keys in a Microsoft Storage Provider

Demonstrates how to list the keys found in a Microsoft CNG Storage Provider, or a Legacy CryptoAPI Storage Provider.

Important: This example requires Chilkat v9.5.0.83 or greater.

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, KeyContainer, JsonObject;

...

procedure TForm1.Button1Click(Sender: TObject);
var
keyCon: HCkKeyContainer;
json: HCkJsonObject;
success: Boolean;
name: PWideChar;
machineKey: Boolean;
algId: PWideChar;
provType: PWideChar;
storageProvider: PWideChar;
i: Integer;
count_i: Integer;

begin
// This example requires Chilkat v9.5.0.83 or greater.

keyCon := CkKeyContainer_Create();
json := CkJsonObject_Create();
CkJsonObject_putEmitCompact(json,False);

success := CkKeyContainer_GetKeys(keyCon,'Microsoft Software Key Storage Provider',json);
if (success <> True) then
  begin
    Memo1.Lines.Add(CkKeyContainer__lastErrorText(keyCon));
    Exit;
  end;

Memo1.Lines.Add(CkJsonObject__emit(json));

// Sample JSON returned by GetKeys

// If the storage provider is CNG, then each key has an "algId".
// If the storage provider is legacy CryptoAPI, then each key has a "provType" (see below)

// If the storage provider is CNG:
// {
//   "storageProvider": "Microsoft Software Key Storage Provider",
//   "key": [
//     {
//       "name": "cn=Chilkat Admin,ou=Persona Not Verified,ou=For Test Purposes Only Decryption Key",
//       "machineKey": false,
//       "algId": "ECDH_P384"
//     },
//     {
//       "name": "CD1CC265-0DA0-4230-8419-CB6F808FE688",
//       "machineKey": false,
//       "algId": "SP800_108_CTR_HMAC"
//     },
//     {
//       "name": "{FF14487C-0AED-471E-8FAD-4BF757C2195C}",
//       "machineKey": false,
//       "algId": "ECDH_P256"
//     },
//     {
//       "name": "{869FD9A6-D815-44FD-A916-4D4A708CD949}",
//       "machineKey": false,
//       "algId": "ECDH_P256"
//     },
//     {
//       "name": "D530ECA9-FF5A-4A6A-AAB3-6EC1870F2CC3",
//       "machineKey": false,
//       "algId": "SP800_108_CTR_HMAC"
//     },
//     {
//       "name": "{F524771E-93C0-4D56-8DE7-2FE3CB5BD837}",
//       "machineKey": false,
//       "algId": "RSA"
//     },
//     {
//       "name": "Microsoft Connected Devices Platform device certificate",
//       "machineKey": false,
//       "algId": "ECDSA_P256"
//     }
//   ]
// }

// If the storage provider is legacy CryptoAPI:

// {
//   "storageProvider": "Microsoft Base Cryptographic Provider v1.0",
//   "key": [
//     {
//       "name": "{48D7FF88-A52E-41E2-9EBD-0CC7E880DC65}",
//       "machineKey": false,
//       "provType": "PROV_RSA_FULL"
//     },
//     {
//       "name": "{CBF7A33A-F9CF-4C30-8A06-94A5C7981058}",
//       "machineKey": false,
//       "provType": "PROV_RSA_FULL"
//     }
//   ]
// }

// Use this online tool to generate parsing code from sample JSON: 
// Generate Parsing Code from JSON

storageProvider := CkJsonObject__stringOf(json,'storageProvider');
i := 0;
count_i := CkJsonObject_SizeOfArray(json,'key');
while i < count_i do
  begin
    CkJsonObject_putI(json,i);
    name := CkJsonObject__stringOf(json,'key[i].name');
    machineKey := CkJsonObject_BoolOf(json,'key[i].machineKey');
    if (CkJsonObject_HasMember(json,'key[i].algId') = True) then
      begin
        algId := CkJsonObject__stringOf(json,'key[i].algId');
      end;
    if (CkJsonObject_HasMember(json,'key[i].provType') = True) then
      begin
        provType := CkJsonObject__stringOf(json,'key[i].provType');
      end;
    i := i + 1;
  end;

CkKeyContainer_Dispose(keyCon);
CkJsonObject_Dispose(json);

end;