(CkPython) Duplicate openssl smime -encrypt -binary -aes-256-cbc -in some_file.dat -out some_file.dat.enc -outform DER cert.crt

Demonstrates how to encrypt to binary DER using 256-bit AES (CBC mode) as the underlying symmetric encryption algorithm, to produce PKCS7 enveloped data (binary DER).

Duplicates the following openssl command:

openssl smime -encrypt -binary -aes-256-cbc -in some_file.dat -out some_file.dat.enc -outform DER cert.crt

Chilkat Python Downloads install with pip pip3 install chilkat or download... Python Module for Windows, MacOS, Linux, Alpine Linux, Solaris

import sys
import chilkat

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

cert = chilkat.CkCert()
success = cert.LoadFromFile("qa_data/openssl/EE.cer")
if (success == False):
    print(cert.lastErrorText())
    sys.exit()

bd = chilkat.CkBinData()
success = bd.LoadFile("qa_data/openssl/hello.txt")
# Assuming success..

crypt = chilkat.CkCrypt2()
success = crypt.SetEncryptCert(cert)
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

crypt.put_CryptAlgorithm("PKI")

# Indicate the underlying symmetric encryption to be used:
crypt.put_Pkcs7CryptAlg("aes")
crypt.put_KeyLength(256)
crypt.put_CipherMode("cbc")

success = crypt.CkEncryptFile("qa_data/openssl/hello.txt","qa_output/hello.txt.enc")
if (success == False):
    print(crypt.lastErrorText())
    sys.exit()

print("Success.")