(PureBasic) Duplicate Java HMAC-SHA1 using Chilkat

This example uses Chilkat to produce the same results as this Java code:

import org.apache.commons.codec.binary.Base64;
import org.apache.commons.codec.binary.Hex;

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.security.InvalidKeyException;
import java.security.Key;
import java.security.NoSuchAlgorithmException;

public void hmacSignatureExample() throws NoSuchAlgorithmException,
InvalidKeyException {

final String method = "POST";
final Long epoch = 1456765639015L; // Hardcoding for this example
final String uri = "/api/v5/policy/1234567890";
final String newline = "\n";

final String privateKey = "qwfvUeVRWAwyjlAzGivefFPTg+m6QtBPmDVv7Ra
/u7K3UuVVRhrZ/qc8EPh8IGJatuxsWD4EX+D9qE/eVvLTpw==";
final String publicKey = "16baedbe244b6c063968850716afb319a";

// Prepare the signature
final String plainText = method + newline + epoch + newline + uri + newline;

// Hash the plaintext with the private key
final byte[] keyBytes = privateKey.getBytes();
final Key key = new SecretKeySpec(keyBytes, 0, keyBytes.length, "HmacSHA1");
final Mac mac = Mac.getInstance("HmacSHA1");
mac.init(key);
String signatureHash = new String(Hex.encodeHex(mac.doFinal(plainText.
getBytes())));

// Prefix with public key
signatureHash = publicKey + ":" + signatureHash;

// Base64 encode to produce AUTHORIZATION
final String authorization = new String(Base64.encodeBase64(signatureHash.
getBytes()));
}

Chilkat PureBasic Module Download Chilkat PureBasic Module

IncludeFile "CkCrypt2.pb"
IncludeFile "CkStringBuilder.pb"

Procedure ChilkatExample()

    ; This example assumes the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    success.i

    ; This is clearly in base64 encoding.
    privateKey.s = "qwfvUeVRWAwyjlAzGivefFPTg+m6QtBPmDVv7Ra/u7K3UuVVRhrZ/qc8EPh8IGJatuxsWD4EX+D9qE/eVvLTpw=="

    ; This is clearly in the hex encoding.
    publicKey.s = "16baedbe244b6c063968850716afb319a"

    plainText.s = "POST" + Chr(10) + "1456765639015" + Chr(10) + "/api/v5/policy/1234567890" + Chr(10)

    crypt.i = CkCrypt2::ckCreate()
    If crypt.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; We want HMAC-SHA1.
    CkCrypt2::setCkMacAlgorithm(crypt, "HMAC")
    CkCrypt2::setCkHashAlgorithm(crypt, "SHA1")

    ; The Java code (above) is literally using the us-ascii chars of the base64 string as the HMAC key.
    ; (It is NOT using the base64 decoded bytes.)
    CkCrypt2::ckSetMacKeyEncoded(crypt,privateKey,"us-ascii")

    ; We want our HMAC-SHA1 output to be a hex string.
    CkCrypt2::setCkEncodingMode(crypt, "hex_lower")

    hmacHex.s = CkCrypt2::ckMacStringENC(crypt,plainText)

    Debug hmacHex

    ; The expected result is: dd3e8440f6b550f152156ea5e12d3e20b262adae

    sbSignatureHash.i = CkStringBuilder::ckCreate()
    If sbSignatureHash.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkStringBuilder::ckAppend(sbSignatureHash,publicKey)
    CkStringBuilder::ckAppend(sbSignatureHash,":")
    CkStringBuilder::ckAppend(sbSignatureHash,hmacHex)

    authorization.s = CkStringBuilder::ckGetEncoded(sbSignatureHash,"base64","utf-8")
    Debug "Authorization: " + authorization

    ; The expected result is:  MTZiYWVkYmUyNDRiNmMwNjM5Njg4NTA3MTZhZmIzMTlhOmRkM2U4NDQwZjZiNTUwZjE1MjE1NmVhNWUxMmQzZTIwYjI2MmFkYWU=


    CkCrypt2::ckDispose(crypt)
    CkStringBuilder::ckDispose(sbSignatureHash)


    ProcedureReturn
EndProcedure