(PowerBuilder) Get Ed25519 Key in Different Formats

Demonstrates how to get/save an Ed25519 private key to different formats.

Converting a private key from one format to another is done by loading in one format and saving/getting in another.

Note: This example requires Chilkat v9.5.0.83 or greater.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

integer li_rc
oleobject loo_Eddsa
oleobject loo_Prng
oleobject loo_PrivKey
integer li_Success
string ls_Pkcs1Base64
string ls_Pkcs8Base64
string ls_Password
string ls_Pkcs8EncBase64
string ls_Ed25519Pem
string ls_Jwk
oleobject loo_Json
string ls_Ed25519_xml
oleobject loo_SbPubKeyHex
string ls_PrivKeyHex

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

loo_Eddsa = create oleobject
// Use "Chilkat_9_5_0.EdDSA" for versions of Chilkat < 10.0.0
li_rc = loo_Eddsa.ConnectToNewObject("Chilkat.EdDSA")
if li_rc < 0 then
    destroy loo_Eddsa
    MessageBox("Error","Connecting to COM object failed")
    return
end if
loo_Prng = create oleobject
// Use "Chilkat_9_5_0.Prng" for versions of Chilkat < 10.0.0
li_rc = loo_Prng.ConnectToNewObject("Chilkat.Prng")

loo_PrivKey = create oleobject
// Use "Chilkat_9_5_0.PrivateKey" for versions of Chilkat < 10.0.0
li_rc = loo_PrivKey.ConnectToNewObject("Chilkat.PrivateKey")

// Generates a new ed25519 key and stores it in privKey.
li_Success = loo_Eddsa.GenEd25519Key(loo_Prng,loo_PrivKey)
if li_Success = 0 then
    Write-Debug loo_Eddsa.LastErrorText
    destroy loo_Eddsa
    destroy loo_Prng
    destroy loo_PrivKey
    return
end if

// ----------------------------------------------------------
// Ed25519 PKCS1 format
// 
// This is the format created by:  openssl genpkey -algorithm X25519 -out xkey.pem
ls_Pkcs1Base64 = loo_PrivKey.GetPkcs1ENC("base64")
Write-Debug ls_Pkcs1Base64

// Sample output:  MC4CAQAwBQYDK2VuBCIEIB1mwirs+eC6XGbkjPIiZyBwQ7768uSd9v5PHOLFbIXo

// PKCS1 is a binary ASN.1 DER format.  You can examine the contents with two online tools:
// 1) Go to ASN.1 Decoder  and paste the base64 into the online form.
// 2) Or Decode Base64 ASN.1 to XML 

// The PKCS1 ASN.1 format for an Ed25519 key look like this:
//   SEQUENCE
//     INTEGER 0
//     SEQUENCE
//       OBJECT IDENTIFIER 1.3.101.110 curveX25519 (ECDH 25519 key agreement algorithm)
//     OCTET STRING 
//       OCTET STRING (32 byte) 1D66C...

// Save it directly to a file.
li_Success = loo_PrivKey.SavePkcs1File("qa_output/ed25519.key")

// ----------------------------------------------------------
// Ed25519 Unencrypted PKCS8 format
// 
// For ed25519, the ASN.1 output is the same as for PKCS1.
ls_Pkcs8Base64 = loo_PrivKey.GetPkcs8ENC("base64")
Write-Debug ls_Pkcs8Base64

// PKCS8 is a binary ASN.1 DER format.  You can examine the contents with two online tools:
// 1) Go to ASN.1 Decoder  and paste the base64 into the online form.
// 2) Or Decode Base64 ASN.1 to XML 

// ----------------------------------------------------------
// Ed25519 Encrypted PKCS8 format
// 
// Note: The encrypted output cannot be examined using the above online tools because the ASN.1 is encrypted.
ls_Password = "secret"
ls_Pkcs8EncBase64 = loo_PrivKey.GetPkcs8EncryptedENC("base64",ls_Password)
Write-Debug ls_Pkcs8EncBase64

// ----------------------------------------------------------
// Ed25519 in PEM format:
// 
ls_Ed25519Pem = loo_PrivKey.GetPkcs1Pem()
Write-Debug ls_Ed25519Pem

// Sample output:

// -----BEGIN PRIVATE KEY-----
// MC4CAQAwBQYDK2VuBCIEIOKPhbULJagBAi7hbRdn1f4AAzh1RqqCHqCAvau7N6yO
// -----END PRIVATE KEY-----

// ----------------------------------------------------------
// Ed25519 in JWK Format
// 
ls_Jwk = loo_PrivKey.GetJwk()

loo_Json = create oleobject
// Use "Chilkat_9_5_0.JsonObject" for versions of Chilkat < 10.0.0
li_rc = loo_Json.ConnectToNewObject("Chilkat.JsonObject")

loo_Json.Load(ls_Jwk)
loo_Json.EmitCompact = 0
Write-Debug loo_Json.Emit()

// Sample output:
// {
//   "kty": "OKP",
//   "crv": "Ed25519",
//   "x": "SE2Kne5xt51z1eciMH2T2ftDQp96Gl6FhY6zSQujiP0",
//   "d": "O-eRXewadF0sNyB0U9omcnt8Qg2ZmeK3WSXPYgqe570",
//   "use": "sig"
// }

// In the above JWK, x is the public key, y is the private key.
// Both are 32 bytes and are base64-url encoded.

// ----------------------------------------------------------
// Ed25519 in XML Format
// 
ls_Ed25519_xml = loo_PrivKey.GetXml()
Write-Debug ls_Ed25519_xml

// Sample output:  <Ed25519KeyValue>w4b/gI0zgYKgjtfWLjNfc4issmP7Qap84uesYNgEefP/WoY3jNOhOzgTYsMtOnuyGn3MdA4NZtsUXVNI1NiTlA==</Ed25519KeyValue>

// The base64 content is composed of the concatenation of the 32-byte private key with the 32-byte public key and then base64 encoded.
// In other words:  Base64(privKey || pubKey)

// ----------------------------------------------------------
// Ed25519 in Raw Hex Format
// 
loo_SbPubKeyHex = create oleobject
// Use "Chilkat_9_5_0.StringBuilder" for versions of Chilkat < 10.0.0
li_rc = loo_SbPubKeyHex.ConnectToNewObject("Chilkat.StringBuilder")

ls_PrivKeyHex = loo_PrivKey.GetRawHex(loo_SbPubKeyHex)

// We should have a 32-byte private key (a 64 character hex string).
Write-Debug "private key = " + ls_PrivKeyHex

// We should have a 32-byte public key (a 64 character hex string).
Write-Debug "public key = " + loo_SbPubKeyHex.GetAsString()

// Sample output:
// key type = ed25519
// size in bits = 256
// private key = d4ee72dbf913584ad5b6d8f1f769f8ad3afe7c28cbf1d4fbe097a88f44755842
// public key = 19bf44096984cdfe8541bac167dc3b96c85086aa30b6b6cb0c5c38ad703166e1


destroy loo_Eddsa
destroy loo_Prng
destroy loo_PrivKey
destroy loo_Json
destroy loo_SbPubKeyHex