Tcl Requires Chilkat v11.0.0+

RSA Encrypt RSA/ECB/OAEPWithSHA1AndMGF1Padding

See more RSA Examples

Demonstrates how to RSA encrypt using RSA/ECB/OAEPWithSHA1AndMGF1Padding. Also demonstrates RSA/ECB/OAEPWithSHA-256AndMGF1Padding. Both of these terms are from Java's JCE. Note: In this context, "ECB" doesn't actually mean anything. It's a symmetric cipher mode that doesn't apply (or make sense) in this context. Tcl

load ./chilkat.dll

set success 0

#  This example assumes the Chilkat API to have been previously unlocked.
#  See Global Unlock Sample for sample code.

set rsa [new_CkRsa]

#  First load a public key object with a public key.
#  In this case, we'll load it from a file.
set pubkey [new_CkPublicKey]

set success [CkPublicKey_LoadFromFile $pubkey "qa_data/pem/rsa_public.pem"]
if {$success == 0} then {
    puts [CkPublicKey_lastErrorText $pubkey]
    delete_CkRsa $rsa
    delete_CkPublicKey $pubkey
    exit
}

#  RSA encryption is limited to small amounts of data. The limit
#  is typically a few hundred bytes and is based on the key size and
#  padding (OAEP vs. PKCS1_5).  RSA encryption is typically used for
#  encrypting hashes or symmetric (bulk encryption algorithm) secret keys.
set plainText "Time is an illusion. Lunchtime doubly so."

#  Import the public key to be used for encrypting.
set success [CkRsa_UsePublicKey $rsa $pubkey]

#  To get OAEP padding, set the PkcsPadding property equal to 0
CkRsa_put_PkcsPadding $rsa 0
CkRsa_put_OaepHash $rsa "sha256"

#  Indicate we'll want hex output
CkRsa_put_EncodingMode $rsa "hex"

#  Encrypt..
set usePrivateKey 0
set encryptedStr [CkRsa_encryptStringENC $rsa $plainText $usePrivateKey]
puts "$encryptedStr"

#  -------------------------------------------------
#  Now decrypt with the matching private key.
set rsa2 [new_CkRsa]

set privKey [new_CkPrivateKey]

set success [CkPrivateKey_LoadEncryptedPem $privKey "qa_data/pem/rsa_passwd.pem" "passwd"]
if {$success == 0} then {
    puts [CkPrivateKey_lastErrorText $privKey]
    delete_CkRsa $rsa
    delete_CkPublicKey $pubkey
    delete_CkRsa $rsa2
    delete_CkPrivateKey $privKey
    exit
}

set success [CkRsa_UsePrivateKey $rsa2 $privKey]

#  Make sure we have the same settings used for encryption.
CkRsa_put_PkcsPadding $rsa2 0
CkRsa_put_EncodingMode $rsa2 "hex"
CkRsa_put_OaepHash $rsa2 "sha256"

set originalStr [CkRsa_decryptStringENC $rsa2 $encryptedStr 1]

puts "$originalStr"

delete_CkRsa $rsa
delete_CkPublicKey $pubkey
delete_CkRsa $rsa2
delete_CkPrivateKey $privKey