Unicode C++

Yubikey RSA Encrypt/Decrypt

See more RSA Examples

Demonstrates how to do RSA decryption using a private key stored on a Yubikey (or other USB token or smartcard).

Note: RSA encryption uses the public key, which is freely exportable and does not need to occur on the token/smartcard.

Unicode C++

#include <CkBinDataW.h>
#include <CkCertW.h>
#include <CkRsaW.h>

void ChilkatSample(void)
    {
    bool success = false;

    //  This example assumes you have a certificate with private key on the Yubikey token.
    //  When doing simple RSA encryption/decryption, we don't actually need the certificate,
    //  but we'll be using the private key associated with the certificate.
    //  
    //  The sensitive/secret material that needs to be kept private is the private key.
    //  The certificate itself and the public key can be freely shared.
    //  

    //  We're going to encrypt and decrypt 32-bytes of data.
    CkBinDataW bd;
    success = bd.AppendEncoded(L"000102030405060708090A0B0C0D0E0F",L"hex");
    success = bd.AppendEncoded(L"000102030405060708090A0B0C0D0E0F",L"hex");

    //  Let's get the desired cert.
    //  For this example, a self-signed certificate with a 2048-bit RSA key was generated in slot 9A.
    CkCertW cert;

    //  Force Chilkat to use PKCS11 over ScMinidriver (if on Windows) and Apple Keychain (if on MacOS)
    cert.put_UncommonOptions(L"NoScMinidriver,NoAppleKeychain");

    cert.put_SmartCardPin(L"123456");

    success = cert.LoadFromSmartcard(L"cn=chilkat_test_2048");
    if (success == false) {
        wprintf(L"%s\n",cert.lastErrorText());
        return;
    }

    //  RSA encrypt using the public key.
    CkRsaW rsa;

    //  Provide the RSA object with the certificate on the Yubkey.
    success = rsa.SetX509Cert(cert,true);
    if (success == false) {
        wprintf(L"%s\n",rsa.lastErrorText());
        return;
    }

    //  RSA encrypt using the public key.
    bool usePrivateKey = false;
    success = rsa.EncryptBd(bd,usePrivateKey);
    if (success == false) {
        wprintf(L"%s\n",rsa.lastErrorText());
        return;
    }

    wprintf(L"RSA Encrypted Output in Hex:\n");
    wprintf(L"%s\n",bd.getEncoded(L"hex"));

    //  Now let's decrypt, using the private key on the Yubikey.
    usePrivateKey = true;
    success = rsa.DecryptBd(bd,usePrivateKey);
    if (success == false) {
        wprintf(L"%s\n",rsa.lastErrorText());
        return;
    }

    wprintf(L"RSA Decrypted Output in Hex:\n");
    wprintf(L"%s\n",bd.getEncoded(L"hex"));
    }