(PowerShell) RSA Encrypt Randomly Generated AES Key

Demonstrates how to RSA encrypt a randomly generated AES key.

Chilkat .NET Downloads Chilkat .NET Assemblies

Add-Type -Path "C:\chilkat\ChilkatDotNet47-9.5.0-x64\ChilkatDotNet47.dll"

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

# First generate a 256-bit AES key (32 bytes).
$prng = New-Object Chilkat.Prng
$bdAesKey = New-Object Chilkat.BinData
$success = $prng.GenRandomBd(32,$bdAesKey)

# Use a public key from a certificate for RSA encryption.
$cert = New-Object Chilkat.Cert

$success = $cert.LoadFromFile("qa_data/pem/mf_public_rsa.pem")
if ($success -eq $false) {
    $($cert.LastErrorText)
    exit
}

$pubKey = $cert.ExportPublicKey()
if ($cert.LastMethodSuccess -ne $true) {
    $($cert.LastErrorText)
    exit
}

$rsa = New-Object Chilkat.Rsa
$success = $rsa.ImportPublicKeyObj($pubKey)
if ($success -eq $false) {
    $($rsa.LastErrorText)
    exit
}

# RSA encrypt our 32-byte AES key.
# The contents of bdAesKey are replaced with result of the RSA encryption.
$success = $rsa.EncryptBd($bdAesKey,$false)
if ($success -eq $false) {
    $($rsa.LastErrorText)
    exit
}

# Return the result as a base64 string
$encryptedAesKey = $bdAesKey.GetEncoded("base64")

$("encrypted AES key = " + $encryptedAesKey)