PowerBuilder

Yubikey RSA Encrypt/Decrypt

See more RSA Examples

Demonstrates how to do RSA decryption using a private key stored on a Yubikey (or other USB token or smartcard).

Note: RSA encryption uses the public key, which is freely exportable and does not need to occur on the token/smartcard.

PowerBuilder

integer li_rc
integer li_Success
oleobject loo_Bd
oleobject loo_Cert
oleobject loo_Rsa
integer li_UsePrivateKey

li_Success = 0

// This example assumes you have a certificate with private key on the Yubikey token.
// When doing simple RSA encryption/decryption, we don't actually need the certificate,
// but we'll be using the private key associated with the certificate.
// 
// The sensitive/secret material that needs to be kept private is the private key.
// The certificate itself and the public key can be freely shared.
// 

// We're going to encrypt and decrypt 32-bytes of data.
loo_Bd = create oleobject
li_rc = loo_Bd.ConnectToNewObject("Chilkat.BinData")
if li_rc < 0 then
    destroy loo_Bd
    MessageBox("Error","Connecting to COM object failed")
    return
end if
li_Success = loo_Bd.AppendEncoded("000102030405060708090A0B0C0D0E0F","hex")
li_Success = loo_Bd.AppendEncoded("000102030405060708090A0B0C0D0E0F","hex")

// Let's get the desired cert.
// For this example, a self-signed certificate with a 2048-bit RSA key was generated in slot 9A.
loo_Cert = create oleobject
li_rc = loo_Cert.ConnectToNewObject("Chilkat.Cert")

// Force Chilkat to use PKCS11 over ScMinidriver (if on Windows) and Apple Keychain (if on MacOS)
loo_Cert.UncommonOptions = "NoScMinidriver,NoAppleKeychain"

loo_Cert.SmartCardPin = "123456"

li_Success = loo_Cert.LoadFromSmartcard("cn=chilkat_test_2048")
if li_Success = 0 then
    Write-Debug loo_Cert.LastErrorText
    destroy loo_Bd
    destroy loo_Cert
    return
end if

// RSA encrypt using the public key.
loo_Rsa = create oleobject
li_rc = loo_Rsa.ConnectToNewObject("Chilkat.Rsa")

// Provide the RSA object with the certificate on the Yubkey.
li_Success = loo_Rsa.SetX509Cert(loo_Cert,1)
if li_Success = 0 then
    Write-Debug loo_Rsa.LastErrorText
    destroy loo_Bd
    destroy loo_Cert
    destroy loo_Rsa
    return
end if

// RSA encrypt using the public key.
li_UsePrivateKey = 0
li_Success = loo_Rsa.EncryptBd(loo_Bd,li_UsePrivateKey)
if li_Success = 0 then
    Write-Debug loo_Rsa.LastErrorText
    destroy loo_Bd
    destroy loo_Cert
    destroy loo_Rsa
    return
end if

Write-Debug "RSA Encrypted Output in Hex:"
Write-Debug loo_Bd.GetEncoded("hex")

// Now let's decrypt, using the private key on the Yubikey.
li_UsePrivateKey = 1
li_Success = loo_Rsa.DecryptBd(loo_Bd,li_UsePrivateKey)
if li_Success = 0 then
    Write-Debug loo_Rsa.LastErrorText
    destroy loo_Bd
    destroy loo_Cert
    destroy loo_Rsa
    return
end if

Write-Debug "RSA Decrypted Output in Hex:"
Write-Debug loo_Bd.GetEncoded("hex")


destroy loo_Bd
destroy loo_Cert
destroy loo_Rsa