PureBasic

Create JCEKS Containing Secret Keys

See more Java KeyStore (JKS) Examples

Demonstrates how to create a JCEKS keystore file containing symmetric secret keys (for AES, Blowfish, HMAC SHA25, ChaCha20, etc.)

This example requires Chilkat v9.5.0.66 or greater.

PureBasic

IncludeFile "CkStringBuilder.pb"
IncludeFile "CkJavaKeyStore.pb"
IncludeFile "CkPrng.pb"
IncludeFile "CkJsonObject.pb"

Procedure ChilkatExample()

    success.i = 0

    ; IMPORTANT: This example requires Chilkat v9.5.0.66 or greater.

    ; This example requires the Chilkat API to have been previously unlocked.
    ; See Global Unlock Sample for sample code.

    jceks.i = CkJavaKeyStore::ckCreate()
    If jceks.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; We'll need a pseudo-random number generator (PRNG) to generate symmetric keys.
    prng.i = CkPrng::ckCreate()
    If prng.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    ; Generate some keys..

    ; 128-bit AES key (16 bytes)
    aesKey.s = CkPrng::ckGenRandom(prng,16,"base64")

    ; 256-bit Blowfish key (32 bytes)
    blowfishKey.s = CkPrng::ckGenRandom(prng,32,"base64")

    ; HMAC SHA256 key
    ; (An HMAC key can be anything, and any length. We'll use the following string:
    hmacKey.s = "This is my HMAC key"

    ; ChaCha20 256-bit
    chachaKey.s = CkPrng::ckGenRandom(prng,32,"base64")

    ; Add each secret key to the JCEKS
    encoding.s = "base64"
    password.s = "secret"
    CkJavaKeyStore::ckAddSecretKey(jceks,aesKey,encoding,"AES","my aes key",password)
    CkJavaKeyStore::ckAddSecretKey(jceks,blowfishKey,encoding,"BLOWFISH","my blowfish key",password)
    ; For HMAC, we're using the us-ascii bytes for the key..
    CkJavaKeyStore::ckAddSecretKey(jceks,hmacKey,"ascii","HMAC_SHA256","my hmac key",password)
    CkJavaKeyStore::ckAddSecretKey(jceks,chachaKey,encoding,"CHACHA","my chacha20 key",password)

    filePassword.s = "password"
    ; Write the JCEKs to a file.
    success = CkJavaKeyStore::ckToFile(jceks,filePassword,"qa_output/secretKeys.jceks")
    If success <> 1
        Debug CkJavaKeyStore::ckLastErrorText(jceks)
        CkJavaKeyStore::ckDispose(jceks)
        CkPrng::ckDispose(prng)
        ProcedureReturn
    EndIf

    ; We can also emit as a JWK Set..
    sbJson.i = CkStringBuilder::ckCreate()
    If sbJson.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    success = CkJavaKeyStore::ckToJwkSet(jceks,"secret",sbJson)
    If success <> 1
        Debug CkJavaKeyStore::ckLastErrorText(jceks)
        CkJavaKeyStore::ckDispose(jceks)
        CkPrng::ckDispose(prng)
        CkStringBuilder::ckDispose(sbJson)
        ProcedureReturn
    EndIf

    ; Emit the JSON in pretty-printed (indented) form:
    json.i = CkJsonObject::ckCreate()
    If json.i = 0
        Debug "Failed to create object."
        ProcedureReturn
    EndIf

    CkJsonObject::ckLoadSb(json,sbJson)
    CkJsonObject::setCkEmitCompact(json, 0)
    Debug CkJsonObject::ckEmit(json)

    ; Output is:

    ; { 
    ;   "keys": [
    ;     { 
    ;       "kty": "oct",
    ;       "alg": "AES",
    ;       "k": "vHekQQB0Gc1NvppapUTW2g",
    ;       "kid": "my aes key"
    ;     },
    ;     { 
    ;       "kty": "oct",
    ;       "alg": "BLOWFISH",
    ;       "k": "qHsdXaJsXicVCZbK8l8hJQpYOa0GkiO9gsRK9WLtht8",
    ;       "kid": "my blowfish key"
    ;     },
    ;     { 
    ;       "kty": "oct",
    ;       "alg": "HMAC_SHA256",
    ;       "k": "VGhpcyBpcyBteSBITUFDIGtleQ",
    ;       "kid": "my hmac key"
    ;     },
    ;     { 
    ;       "kty": "oct",
    ;       "alg": "CHACHA",
    ;       "k": "yNv832U43C9BcWvaQAH2_rG-GwfmpgT5JBRllWGQY1o",
    ;       "kid": "my chacha20 key"
    ;     }
    ;   ]
    ; }
    ; 


    CkJavaKeyStore::ckDispose(jceks)
    CkPrng::ckDispose(prng)
    CkStringBuilder::ckDispose(sbJson)
    CkJsonObject::ckDispose(json)


    ProcedureReturn
EndProcedure