(Tcl) AES Encrypt String (utf-8 byte representation) and return Base64

Demonstrates how to AES encrypt the utf-8 byte representation of a string and return in base64 format.

Chilkat Tcl Extension Downloads Chilkat Tcl Extension Downloads

load ./chilkat.dll

# This example requires the Chilkat API to have been previously unlocked.
# See Global Unlock Sample for sample code.

set crypt [new_CkCrypt2]

CkCrypt2_put_CryptAlgorithm $crypt "aes"
CkCrypt2_put_CipherMode $crypt "cbc"
CkCrypt2_put_KeyLength $crypt 256
CkCrypt2_put_Charset $crypt "utf-8"
CkCrypt2_put_EncodingMode $crypt "base64"

set ivHex "000102030405060708090A0B0C0D0E0F"
CkCrypt2_SetEncodedIV $crypt $ivHex "hex"
set keyHex "000102030405060708090A0B0C0D0E0F101112131415161718191A1B1C1D1E1F"
CkCrypt2_SetEncodedKey $crypt $keyHex "hex"

set encryptedStr [CkCrypt2_encryptStringENC $crypt "This is the original string"]
puts "$encryptedStr"

# Let's say we want to URL encode the base64 string..
CkCrypt2_put_CryptAlgorithm $crypt "none"
CkCrypt2_put_EncodingMode $crypt "url"
set urlEncoded [CkCrypt2_encryptStringENC $crypt $encryptedStr]
puts "$urlEncoded"

# Sample output:

#  q3fmgEqjqa9o//ZS6aPuh4Wtbrrxx/WOIQSKeVnesZg=
#  q3fmgEqjqa9o%2F%2FZS6aPuh4Wtbrrxx%2FWOIQSKeVnesZg%3D

# -------------------------------------------------------------------
# Now let's do the reverse...
# 

# We start with a string that is the binary encrypted data, base64 encoded, and then URL encoded.
set encBase64Url "q3fmgEqjqa9o%2F%2FZS6aPuh4Wtbrrxx%2FWOIQSKeVnesZg%3D"

# We'll use the same crypt object.  If using a new instance of the crypt object,
# make sure *all* settings are identical:  the algorithm, cipher mode, key length, charset, encoding mode, IV, and secret key.

# Decode from URL...
CkCrypt2_put_CryptAlgorithm $crypt "none"
CkCrypt2_put_EncodingMode $crypt "url"
set encBase64 [CkCrypt2_decryptStringENC $crypt $urlEncoded]
puts "$encBase64"

# Now decrypt...
CkCrypt2_put_CryptAlgorithm $crypt "aes"
CkCrypt2_put_EncodingMode $crypt "base64"
set originalStr [CkCrypt2_decryptStringENC $crypt $encBase64]
puts "$originalStr"

delete_CkCrypt2 $crypt