(PowerShell) Encrypting/decrypting a data stream.

This example demonstrates how to encrypt (using a symmetric encryption algorithm such as AES, ChaCha20, Blowfish, RC2, 3DES, etc) a large amount of data. The data is passed in chunks to one of the encrypt methods: EncryptBytes, EncryptString, EncryptBytesENC, or EncryptStringENC, etc. The FirstChunk and LastChunk properties are used to indicate whether a chunk is the first, middle, or last in a stream to be encrypted. By default, both FirstChunk and LastChunk equal $true -- meaning that the data passed is the entire amount.

Note: You may feed the data in chunks that are smaller than the block size of the encryption algorithm (AES and Twofish have a block size of 16 bytes. DES, 3DES, Blowfish, and RC2 have a block size of 8 bytes. ARC4 and ChaCha20 are streaming encryption algorithms and don't have a block size, but technically you can think of it as having a block size of 1 byte.)

Chilkat will buffer the data as required. If an amount of data smaller than the block size is passed such that the entire amount is buffered, then an empty string (or 0 bytes) is returned. The buffered data will be added to the data passed in subsequent calls. When the final data chunk is passed, it is padded to the encryption algorithm's block size (according to the PaddingScheme property) and the encryption is complete.

Decrypting in chunks is identical to encrypting in chunks.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$crypt = New-Object Chilkat.Crypt2

$crypt.CryptAlgorithm = "aes"
$crypt.CipherMode = "cbc"
$crypt.KeyLength = 128

$crypt.SetEncodedKey("000102030405060708090A0B0C0D0E0F","hex")
$crypt.SetEncodedIV("000102030405060708090A0B0C0D0E0F","hex")

$crypt.EncodingMode = "hex"
$txt1 = "The quick brown fox jumped over the lazy dog.`r`n"
$txt2 = "-`r`n"
$txt3 = "Done.`r`n"

$sbEncrypted = New-Object Chilkat.StringBuilder

# Encrypt the 1st chunk:
# (don't worry about feeding the data to the encryptor in 
# exact multiples of the encryption algorithm's block size.
# Chilkat will buffer the data.)
$crypt.FirstChunk = $true
$crypt.LastChunk = $false
$sbEncrypted.Append($crypt.EncryptStringENC($txt1))

# Encrypt the 2nd chunk
$crypt.FirstChunk = $false
$crypt.LastChunk = $false
$sbEncrypted.Append($crypt.EncryptStringENC($txt2))

# Now encrypt N more chunks...
# Remember -- we're doing this in CBC mode, so each call
# to the encrypt method depends on the state from previous
# calls...
$crypt.FirstChunk = $false
$crypt.LastChunk = $false

for ($i = 0; $i -le 4; $i++) {
    $sbEncrypted.Append($crypt.EncryptStringENC($txt1))
    $sbEncrypted.Append($crypt.EncryptStringENC($txt2))
}

# Now encrypt the last chunk:
$crypt.FirstChunk = $false
$crypt.LastChunk = $true
$sbEncrypted.Append($crypt.EncryptStringENC($txt3))

$($sbEncrypted.GetAsString())

# Now decrypt in one call.
# (The data we're decrypting is both the first AND last chunk.)  
$crypt.FirstChunk = $true
$crypt.LastChunk = $true
$decryptedText = $crypt.DecryptStringENC($sbEncrypted.GetAsString())

$($decryptedText)

# Note: You may decrypt in N chunks by setting the FirstChunk
# and LastChunk properties prior to calling the Decrypt* methods