(CkPython) List Keys in a Microsoft Storage Provider

Demonstrates how to list the keys found in a Microsoft CNG Storage Provider, or a Legacy CryptoAPI Storage Provider.

Important: This example requires Chilkat v9.5.0.83 or greater.

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires Chilkat v9.5.0.83 or greater.

keyCon = chilkat.CkKeyContainer()
json = chilkat.CkJsonObject()
json.put_EmitCompact(False)

success = keyCon.GetKeys("Microsoft Software Key Storage Provider",json)
if (success != True):
    print(keyCon.lastErrorText())
    sys.exit()

print(json.emit())

# Sample JSON returned by GetKeys

# If the storage provider is CNG, then each key has an "algId".
# If the storage provider is legacy CryptoAPI, then each key has a "provType" (see below)

# If the storage provider is CNG:
# {
#   "storageProvider": "Microsoft Software Key Storage Provider",
#   "key": [
#     {
#       "name": "cn=Chilkat Admin,ou=Persona Not Verified,ou=For Test Purposes Only Decryption Key",
#       "machineKey": false,
#       "algId": "ECDH_P384"
#     },
#     {
#       "name": "CD1CC265-0DA0-4230-8419-CB6F808FE688",
#       "machineKey": false,
#       "algId": "SP800_108_CTR_HMAC"
#     },
#     {
#       "name": "{FF14487C-0AED-471E-8FAD-4BF757C2195C}",
#       "machineKey": false,
#       "algId": "ECDH_P256"
#     },
#     {
#       "name": "{869FD9A6-D815-44FD-A916-4D4A708CD949}",
#       "machineKey": false,
#       "algId": "ECDH_P256"
#     },
#     {
#       "name": "D530ECA9-FF5A-4A6A-AAB3-6EC1870F2CC3",
#       "machineKey": false,
#       "algId": "SP800_108_CTR_HMAC"
#     },
#     {
#       "name": "{F524771E-93C0-4D56-8DE7-2FE3CB5BD837}",
#       "machineKey": false,
#       "algId": "RSA"
#     },
#     {
#       "name": "Microsoft Connected Devices Platform device certificate",
#       "machineKey": false,
#       "algId": "ECDSA_P256"
#     }
#   ]
# }

# If the storage provider is legacy CryptoAPI:

# {
#   "storageProvider": "Microsoft Base Cryptographic Provider v1.0",
#   "key": [
#     {
#       "name": "{48D7FF88-A52E-41E2-9EBD-0CC7E880DC65}",
#       "machineKey": false,
#       "provType": "PROV_RSA_FULL"
#     },
#     {
#       "name": "{CBF7A33A-F9CF-4C30-8A06-94A5C7981058}",
#       "machineKey": false,
#       "provType": "PROV_RSA_FULL"
#     }
#   ]
# }

# Use this online tool to generate parsing code from sample JSON: 
# Generate Parsing Code from JSON

storageProvider = json.stringOf("storageProvider")
i = 0
count_i = json.SizeOfArray("key")
while i < count_i :
    json.put_I(i)
    name = json.stringOf("key[i].name")
    machineKey = json.BoolOf("key[i].machineKey")
    if (json.HasMember("key[i].algId") == True):
        algId = json.stringOf("key[i].algId")

    if (json.HasMember("key[i].provType") == True):
        provType = json.stringOf("key[i].provType")

    i = i + 1