Swift

Generate RSA Key and Export to PKCS1 / PKCS8

See more RSA Examples

_LANGUAGE_ example code showing how to generate an RSA public/private key and save to PKCS1 and PKCS8 format files. In a PKCS1 or PKCS8 formatted file, the key is stored in binary ASN.1 format (and ASN.1 is itself written according to DER -- Distinguished Encoding Rules). A PEM file simply contains the binary ASN.1 base64 encoded and delimited by BEGIN/END lines. PKCS1 format files are never encrypted. PKCS8 can be encrypted or unencrypted. Public keys are never encrypted (there is no need). Private keys *should* always be encrypted - unless perhaps the unencrypted private key is obtained and itself stored in some sort of secure place. Swift

func chilkatTest() {
    var success: Bool = false

    // This example assumes the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    let rsa = CkoRsa()!

    // Generate a 2048-bit key.  Chilkat RSA supports
    // key sizes ranging from 512 bits to 8192 bits.
    let privKey = CkoPrivateKey()!
    success = rsa.genKey(numBits: 2048, privKey: privKey)
    if success == false {
        print("\(rsa.lastErrorText!)")
        return
    }

    // Get the public key
    let pubKey = CkoPublicKey()!
    privKey.toPublicKey(pubKey: pubKey)

    // Get the public key as a PKCS8 PEM string
    var pubKeyPem: String? = pubKey.getPem(preferPkcs1: false)
    print("\(pubKeyPem!)")

    // Get the public key in PKCS8 format, in a Base64 encoded string.
    var pubKeyPkcs8Base64: String? = pubKey.getEncoded(preferPkcs1: false, encoding: "base64")
    print("\(pubKeyPkcs8Base64!)")

    // Get the public key in PKCS1 format, in a Base64 encoded string.
    var pubKeyPkcs1Base64: String? = pubKey.getEncoded(preferPkcs1: true, encoding: "base64")
    print("\(pubKeyPkcs1Base64!)")

    // Get the private key in a PKCS8 PEM string.
    var privKeyPem: String? = privKey.getPkcs8Pem()
    print("\(privKeyPem!)")

    // Get the private key in a PKCS8 encrypted PEM string.
    var privKeyEncPem: String? = privKey.getPkcs8EncryptedPem(password: "myPassword")
    print("\(privKeyEncPem!)")

    // Get the private key in PKCS1 Base64 format
    var privKeyPkcs1Base64: String? = privKey.getPkcs1ENC(encoding: "base64")
    print("\(privKeyPkcs1Base64!)")

    // Get the private key in PKCS8 Base64 format
    var privKeyPkcs8Base64: String? = privKey.getPkcs8ENC(encoding: "base64")
    print("\(privKeyPkcs8Base64!)")

    // Save to PKCS1 / PKCS8 / PEM files...

    // Save the public key to PKCS8 binary DER
    success = pubKey.saveDerFile(preferPkcs1: false, path: "pubKey_pkcs8.der")

    // Save the public key to PKCS1 binary DER
    success = pubKey.saveDerFile(preferPkcs1: "pubKey_pkcs1.der")

    // Save the private key to unencrypted binary PKCS1 DER.
    // Note: PKCS1 is never found in an encrypted format. 
    success = privKey.savePkcs1File(path: "privKey_pkcs1.der")

    // Save the private key to unencrypted binary PKCS8
    success = privKey.savePkcs8File(path: "privKey_pkcs8.der")

    // Save the private key to encrypted binary PKCS8
    success = privKey.savePkcs8EncryptedFile(password: "myPassword", path: "privKey_enc_pkcs8.der")

    // Save the private key to unencrypted PKCS8 PEM
    success = privKey.savePkcs8PemFile(path: "privKey.pem")

    // Save the private key to encrypted PKCS8 PEM
    success = privKey.savePkcs8EncryptedPemFile(password: "myPassword", path: "privKey_enc.pem")

}