(Visual FoxPro) Generate RSA Key and Export to PKCS1 / PKCS8

Visual FoxPro example code showing how to generate an RSA public/private key and save to PKCS1 and PKCS8 format files. In a PKCS1 or PKCS8 formatted file, the key is stored in binary ASN.1 format (and ASN.1 is itself written according to DER -- Distinguished Encoding Rules). A PEM file simply contains the binary ASN.1 base64 encoded and delimited by BEGIN/END lines. PKCS1 format files are never encrypted. PKCS8 can be encrypted or unencrypted. Public keys are never encrypted (there is no need). Private keys *should* always be encrypted - unless perhaps the unencrypted private key is obtained and itself stored in some sort of secure place.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

LOCAL loRsa
LOCAL lnSuccess
LOCAL loPubKey
LOCAL loPrivKey
LOCAL lcPubKeyPem
LOCAL lcPubKeyPkcs8Base64
LOCAL lcPubKeyPkcs1Base64
LOCAL lcPrivKeyPem
LOCAL lcPrivKeyEncPem
LOCAL lcPrivKeyPkcs1Base64
LOCAL lcPrivKeyPkcs8Base64

* This example assumes the Chilkat API to have been previously unlocked.
* See Global Unlock Sample for sample code.

loRsa = CreateObject('Chilkat_9_5_0.Rsa')

* Generate a 2048-bit key.  Chilkat RSA supports
* key sizes ranging from 512 bits to 8192 bits.
lnSuccess = loRsa.GenerateKey(2048)
IF (lnSuccess <> 1) THEN
    ? loRsa.LastErrorText
    RELEASE loRsa
    CANCEL
ENDIF

* Get the public and private key parts:
loPubKey = loRsa.ExportPublicKeyObj()
loPrivKey = loRsa.ExportPrivateKeyObj()

* Get the public key as a PKCS8 PEM string
lcPubKeyPem = loPubKey.GetOpenSslPem()
? lcPubKeyPem

* Get the public key in PKCS8 format, in a Base64 encoded string.
lcPubKeyPkcs8Base64 = loPubKey.GetPkcs8ENC("base64")
? lcPubKeyPkcs8Base64

* Get the public key in PKCS1 format, in a Base64 encoded string.
lcPubKeyPkcs1Base64 = loPubKey.GetPkcs1ENC("base64")
? lcPubKeyPkcs1Base64

* Get the private key in a PKCS8 PEM string.
lcPrivKeyPem = loPrivKey.GetPkcs8Pem()
? lcPrivKeyPem

* Get the private key in a PKCS8 encrypted PEM string.
lcPrivKeyEncPem = loPrivKey.GetPkcs8EncryptedPem("myPassword")
? lcPrivKeyEncPem

* Get the private key in PKCS1 Base64 format
lcPrivKeyPkcs1Base64 = loPrivKey.GetPkcs1ENC("base64")
? lcPrivKeyPkcs1Base64

* Get the private key in PKCS8 Base64 format
lcPrivKeyPkcs8Base64 = loPrivKey.GetPkcs8ENC("base64")
? lcPrivKeyPkcs8Base64

* Save to PKCS1 / PKCS8 / PEM files...

* Save the public key to PKCS8 binary DER
* Note: Chilkat is confusingly using the substring "OpenSsl" in the method name.
* A better choice would've been "SavePkcs8DerFile". When you see "OpenSsl" referring to
* a key format in a Chilkat method name, assume "PKCS8".
lnSuccess = loPubKey.SaveOpenSslDerFile("pubKey_pkcs8.der")

* Save the public key to PKCS1 binary DER
lnSuccess = loPubKey.SaveRsaDerFile("pubKey_pkcs1.der")

* Save the private key to unencrypted binary PKCS1 DER.
* Note: PKCS1 is never found in an encrypted format. 
lnSuccess = loPrivKey.SaveRsaDerFile("privKey_pkcs1.der")

* Save the private key to unencrypted binary PKCS8
lnSuccess = loPrivKey.SavePkcs8File("privKey_pkcs8.der")

* Save the private key to encrypted binary PKCS8
lnSuccess = loPrivKey.SavePkcs8EncryptedFile("myPassword","privKey_enc_pkcs8.der")

* Save the private key to unencrypted PKCS8 PEM
lnSuccess = loPrivKey.SavePkcs8PemFile("privKey.pem")

* Save the private key to encrypted PKCS8 PEM
lnSuccess = loPrivKey.SavePkcs8EncryptedPemFile("myPassword","privKey_enc.pem")

RELEASE loPubKey
RELEASE loPrivKey

RELEASE loRsa