(PowerShell) Duplicate openssl smime -encrypt -binary -aes-256-cbc -in some_file.dat -out some_file.dat.enc -outform DER cert.crt

Demonstrates how to encrypt to binary DER using 256-bit AES (CBC mode) as the underlying symmetric encryption algorithm, to produce PKCS7 enveloped data (binary DER).

Duplicates the following openssl command:

openssl smime -encrypt -binary -aes-256-cbc -in some_file.dat -out some_file.dat.enc -outform DER cert.crt

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

$cert = New-Object Chilkat.Cert
$success = $cert.LoadFromFile("qa_data/openssl/EE.cer")
if ($success -eq $false) {
    $($cert.LastErrorText)
    exit
}

$bd = New-Object Chilkat.BinData
$success = $bd.LoadFile("qa_data/openssl/hello.txt")
# Assuming success..

$crypt = New-Object Chilkat.Crypt2
$success = $crypt.SetEncryptCert($cert)
if ($success -eq $false) {
    $($crypt.LastErrorText)
    exit
}

$crypt.CryptAlgorithm = "PKI"

# Indicate the underlying symmetric encryption to be used:
$crypt.Pkcs7CryptAlg = "aes"
$crypt.KeyLength = 256
$crypt.CipherMode = "cbc"

$success = $crypt.CkEncryptFile("qa_data/openssl/hello.txt","qa_output/hello.txt.enc")
if ($success -eq $false) {
    $($crypt.LastErrorText)
    exit
}

$("Success.")