CkPython Requires Chilkat v11.0.0+

Encrypt with Chilkat, Decrypt with OpenSSL

See more OpenSSL Examples

Demonstrates how to RSA encrypt a string using Chilkat, and then shows the corresponding OpenSSL command to RSA decrypt. The OpenSSL command to decrypt is as follows:

openssl rsautl -decrypt -inkey VP_Private.pem -in rsa_encrypted.bin -out original.txt

CkPython

import sys
import chilkat

success = False

#  This example requires the Chilkat API to have been previously unlocked.
#  See Global Unlock Sample for sample code.

rsa = chilkat.CkRsa()

#  Note: RSA encryption uses the public key.  
#  RSA decryption uses the private key.
#  The reason is that the public key can be freely provided to anybody.  This allows anybody
#  to send an encrypted message to the private key owner, and only the private key owner 
#  can decrypt.
key = chilkat.CkPublicKey()

#  Load an RSA public key from a PEM file:
success = key.LoadFromFile("qa_data/pem/VP_Public.pem")
if (success == False):
    print(key.lastErrorText())
    sys.exit()

#  Load the public key into the RSA object.
success = rsa.UsePublicKey(key)
if (success == False):
    print(rsa.lastErrorText())
    sys.exit()

strToEncrypt = "00000000;XYZ2-3BHQ-ABCD-MMVV;6MY1-GHJK-9LRR;0"

#  The LittleEndian property is False by default, but it is set here
#  anyway to show that LittleEndian byte ordering is required for OpenSSL compatibility.
rsa.put_LittleEndian(False)

usePrivateKey = False
encryptedBytes = chilkat.CkByteData()
success = rsa.EncryptString(strToEncrypt,usePrivateKey,encryptedBytes)
if (rsa.get_LastMethodSuccess() == False):
    print(rsa.lastErrorText())
    sys.exit()

#  The OpenSSL command to decrypt would be this:
#  openssl rsautl -decrypt -inkey VP_Private.pem -in rsa_encrypted.bin -out original.txt

fac = chilkat.CkFileAccess()
success = fac.WriteEntireFile("qa_output/rsa_encrypted.bin",encryptedBytes)
if (success == False):
    print(fac.lastErrorText())
    sys.exit()

print("RSA Encryption Succeeded.")