(Lianja) Create JCEKS Containing Secret Keys

Demonstrates how to create a JCEKS keystore file containing symmetric secret keys (for AES, Blowfish, HMAC SHA25, ChaCha20, etc.)

This example requires Chilkat v9.5.0.66 or greater.

Chilkat Lianja Extension Download Chilkat Lianja Extension

// IMPORTANT: This example requires Chilkat v9.5.0.66 or greater.

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loJceks = createobject("CkJavaKeyStore")

// We'll need a pseudo-random number generator (PRNG) to generate symmetric keys.
loPrng = createobject("CkPrng")

// Generate some keys..

// 128-bit AES key (16 bytes)
lcAesKey = loPrng.GenRandom(16,"base64")

// 256-bit Blowfish key (32 bytes)
lcBlowfishKey = loPrng.GenRandom(32,"base64")

// HMAC SHA256 key
// (An HMAC key can be anything, and any length. We'll use the following string:
lcHmacKey = "This is my HMAC key"

// ChaCha20 256-bit
lcChachaKey = loPrng.GenRandom(32,"base64")

// Add each secret key to the JCEKS
lcEncoding = "base64"
lcPassword = "secret"
loJceks.AddSecretKey(lcAesKey,lcEncoding,"AES","my aes key",lcPassword)
loJceks.AddSecretKey(lcBlowfishKey,lcEncoding,"BLOWFISH","my blowfish key",lcPassword)
// For HMAC, we're using the us-ascii bytes for the key..
loJceks.AddSecretKey(lcHmacKey,"ascii","HMAC_SHA256","my hmac key",lcPassword)
loJceks.AddSecretKey(lcChachaKey,lcEncoding,"CHACHA","my chacha20 key",lcPassword)

lcFilePassword = "password"
// Write the JCEKs to a file.
llSuccess = loJceks.ToFile(lcFilePassword,"qa_output/secretKeys.jceks")
if (llSuccess <> .T.) then
    ? loJceks.LastErrorText
    release loJceks
    release loPrng
    return
endif

// We can also emit as a JWK Set..
loSbJson = createobject("CkStringBuilder")
llSuccess = loJceks.ToJwkSet("secret",loSbJson)
if (llSuccess <> .T.) then
    ? loJceks.LastErrorText
    release loJceks
    release loPrng
    release loSbJson
    return
endif

// Emit the JSON in pretty-printed (indented) form:
loJson = createobject("CkJsonObject")
loJson.LoadSb(loSbJson)
loJson.EmitCompact = .F.
? loJson.Emit()

// Output is:

// { 
//   "keys": [
//     { 
//       "kty": "oct",
//       "alg": "AES",
//       "k": "vHekQQB0Gc1NvppapUTW2g",
//       "kid": "my aes key"
//     },
//     { 
//       "kty": "oct",
//       "alg": "BLOWFISH",
//       "k": "qHsdXaJsXicVCZbK8l8hJQpYOa0GkiO9gsRK9WLtht8",
//       "kid": "my blowfish key"
//     },
//     { 
//       "kty": "oct",
//       "alg": "HMAC_SHA256",
//       "k": "VGhpcyBpcyBteSBITUFDIGtleQ",
//       "kid": "my hmac key"
//     },
//     { 
//       "kty": "oct",
//       "alg": "CHACHA",
//       "k": "yNv832U43C9BcWvaQAH2_rG-GwfmpgT5JBRllWGQY1o",
//       "kid": "my chacha20 key"
//     }
//   ]
// }
// 


release loJceks
release loPrng
release loSbJson
release loJson