(Node.js) RSAES-OAEP Encrypt String with AES-128 Content Encryption and SHA256

Encrypts a string using RSAES-OAEP with SHA256 and AES-128 content encryption to produce PKCS7 output (base64 encoded).

Note: This example requires Chilkat v9.5.0.67 or greater.

Install Chilkat for Node.js and Electron using npm at Chilkat npm packages for Node.js Chilkat npm packages for Electron on Windows, Linux, MacOSX, and ARM

var os = require('os');
if (os.platform() == 'win32') {  
    if (os.arch() == 'ia32') {
        var chilkat = require('@chilkat/ck-node21-win-ia32');
    } else {
        var chilkat = require('@chilkat/ck-node21-win64'); 
    }
} else if (os.platform() == 'linux') {
    if (os.arch() == 'arm') {
        var chilkat = require('@chilkat/ck-node21-arm');
    } else if (os.arch() == 'x86') {
        var chilkat = require('@chilkat/ck-node21-linux32');
    } else {
        var chilkat = require('@chilkat/ck-node21-linux64');
    }
} else if (os.platform() == 'darwin') {
    if (os.arch() == 'arm64') {
        var chilkat = require('@chilkat/ck-node21-mac-m1');
    } else {
        var chilkat = require('@chilkat/ck-node21-macosx');
    }
}

function chilkatExample() {

    // This example requires the Chilkat Crypt API to have been previously unlocked.
    // See Unlock Chilkat Crypt for sample code.

    // First build a string to be encrypted
    var sb = new chilkat.StringBuilder();
    var i = 1;
    while (i < 25) {
        sb.AppendInt(i);
        sb.Append(" the quick brown fox jumped over the lazy dog.\r\n");
        i = i+1;
    }

    console.log(sb.GetAsString());

    // The string to be encrypted looks like this:

    // 1 the quick brown fox jumped over the lazy dog.
    // 2 the quick brown fox jumped over the lazy dog.
    // 3 the quick brown fox jumped over the lazy dog.
    // 4 the quick brown fox jumped over the lazy dog.
    // 5 the quick brown fox jumped over the lazy dog.
    // 6 the quick brown fox jumped over the lazy dog.
    // ...

    // Load a digital certificate. 
    // We don't need the private key for encryption.
    // Only the public key is needed (which is included in a certificate).
    var cert = new chilkat.Cert();
    var success = cert.LoadFromFile("qa_data/rsaes-oaep/cert.pem");
    if (success !== true) {
        console.log(cert.LastErrorText);
        return;
    }

    var crypt = new chilkat.Crypt2();

    // Tell the crypt object to use the certificate.
    crypt.SetEncryptCert(cert);

    // Indicate that we want PKI encryption (i.e. public-key infrastructure)
    // to produce a CMS message (Cryptographic Message Syntax/PKCS7),
    // that is be created with RSAES-OAEP padding, SHA256, and AES-128 for the
    // bulk encryption.
    crypt.CryptAlgorithm = "pki";
    crypt.Pkcs7CryptAlg = "aes";
    crypt.KeyLength = 128;
    crypt.OaepHash = "sha256";
    crypt.OaepPadding = true;

    // Also, don't forget to be specific about the character encoding (byte representation) of the
    // string to be encrypted.
    crypt.Charset = "utf-8";

    // Now indicate that the PKCS7 output is to be returned in the base64 encoding.
    crypt.EncodingMode = "base64";

    var base64Pkcs7 = crypt.EncryptStringENC(sb.GetAsString());
    if (crypt.LastMethodSuccess !== true) {
        console.log(crypt.LastErrorText);
        return;
    }

    // Show the output
    console.log(base64Pkcs7);

    // This base64 can be copy-and-pasted into the form at http://lapo.it/asn1js/
    // to verify that all the chosen algorithms were indeed used.

    console.log("OK.");

}

chilkatExample();