(SQL Server) RSA Encrypt and OpenSSL Decrypt

Demonstrates how to use Chilkat to RSA encrypt, and then use OpenSSL to decrypt.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    -- This requires the Chilkat API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @rsa int
    -- Use "Chilkat_9_5_0.Rsa" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Rsa', @rsa OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    DECLARE @success int
    EXEC sp_OAMethod @rsa, 'GenerateKey', @success OUT, 2048

    DECLARE @privKey int
    EXEC sp_OAMethod @rsa, 'ExportPrivateKeyObj', @privKey OUT
    EXEC sp_OAMethod @privKey, 'SavePkcs8PemFile', @success OUT, 'qa_output/privKey.pem'
    EXEC @hr = sp_OADestroy @privKey

    EXEC sp_OASetProperty @rsa, 'EncodingMode', 'base64'
    DECLARE @plainText nvarchar(4000)
    SELECT @plainText = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz01234567890'
    DECLARE @bUsePrivateKey int
    SELECT @bUsePrivateKey = 0
    DECLARE @encryptedStr nvarchar(4000)
    EXEC sp_OAMethod @rsa, 'EncryptStringENC', @encryptedStr OUT, @plainText, @bUsePrivateKey

    DECLARE @bd int
    -- Use "Chilkat_9_5_0.BinData" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.BinData', @bd OUT

    EXEC sp_OAMethod @bd, 'AppendEncoded', @success OUT, @encryptedStr, 'base64'
    EXEC sp_OAMethod @bd, 'WriteFile', @success OUT, 'qa_output/enc.dat'

    -- The OpenSSL command to decrypt is:
    -- openssl pkeyutl -in enc.dat -inkey privKey.pem -keyform PEM -pkeyopt rsa_padding_mode:pkcs1 -decrypt


    PRINT 'OK'

    EXEC @hr = sp_OADestroy @rsa
    EXEC @hr = sp_OADestroy @bd


END
GO