Rust

Encrypt File to PKCS7 .p7m

See more Encryption Examples

_LANGUAGE_ example to public-key encrypt a file creating a PKCS#7 .p7m file as output. Also demonstrates how to decrypt the .p7m to recover the original file. Rust

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

let crypt = chilkat::Crypt2::new();

// Indicate the public-key encryption is to be used.
// Do this by setting the encryption algorithm equal 
// to "PKI" (an acroynm for public-key infrastructure).
crypt.set_crypt_algorithm("PKI");

// Indicate the inner symmetric encryption algorithm to be used.
// possible values are "aes", "des", "3des", and "rc2".
// For this example, we'll use 256-bit AES encryption.
crypt.set_pkcs7_crypt_alg("aes");
crypt.set_key_length(256);

// To encrypt, only a certificate w/ public key is needed.
// (The certificate w/ private key is required for decryption.)

// The LoadFromFile method can load virtually any certificate format:
// 1. DER encoded binary X.509 (.CER)
// 2. Base-64 encoded X.509 (.CER)
// 3. Cryptographic Message Syntax Standard - PKCS #7 Certificates (.P7B)
// 4. PEM format
let encrypt_cert = chilkat::Cert::new();
if encrypt_cert.load_from_file("/Users/chilkat/testData/cer/acme.cer").is_err() {
    println!("{}", encrypt_cert.last_error_text());
    return;
}

// Tell the crypt object to use the certificate for encrypting:
crypt.add_encrypt_cert(&encrypt_cert);

// Encrypt a file, producing a .p7m as output.
// The input file is unchanged, the output .p7m contains the encrypted
// contents of the input file.
let mut in_file = "/Users/chilkat/testData/pdf/sample.pdf".to_string();
let mut out_file = "/Users/chilkat/testData/p7m/sample.pdf.p7m".to_string();
if crypt.ck_encrypt_file(&in_file, &out_file).is_err() {
    println!("{}", crypt.last_error_text());
    return;
}

// For demonstration purposes, a different instance of the object will be used
// for decryption.
let decrypt = chilkat::Crypt2::new();

// To decrypt, the certificate w/ private key is required.  A PFX (also known
// as PKCS#12) is a common secure container for certs and private keys.
let pfx_filename = "/Users/chilkat/testData/pfx/acme.pfx".to_string();
let pfx_password = "secret".to_string();

// Tell the component to look in the PFX file for certs and private keys.
if decrypt.add_pfx_source_file(&pfx_filename, &pfx_password).is_err() {
    println!("{}", decrypt.last_error_text());
    return;
}

// Tell the decrypt object that PKI (public key encryption) is to be used
// for decryptiong.
decrypt.set_crypt_algorithm("PKI");
// There is no need to set the Pkcs7Alg or KeyLength because this information
// is contained within the .p7m

// Decrypt the .p7m
in_file = "/Users/chilkat/testData/p7m/sample.pdf.p7m".to_string();
out_file = "/Users/chilkat/testData/pdf/recovered.pdf".to_string();
if decrypt.ck_decrypt_file(&in_file, &out_file).is_err() {
    println!("{}", decrypt.last_error_text());
    return;
}

println!("Success!");