(VBScript) How to Generate an Elliptic Curve Shared Secret

Demonstrates how to generate an ECC (Elliptic Curve Cryptography) shared secret. Imagine a cilent has one ECC private key, the server has another. A shared secret is computed by each side providing it's public key to the other. The private keys are kept private.

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Dim fso, outFile
Set fso = CreateObject("Scripting.FileSystemObject")
'Create a Unicode (utf-16) output text file.
Set outFile = fso.CreateTextFile("output.txt", True, True)

' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' This example includes both client-side and server-side code.
' Each code segment is marked as client-side or server-side.
' Imagine these segments are running on separate computers...

' -----------------------------------------------------------------
' (Client-Side) Generate an ECC key, save the public part to a file.
' -----------------------------------------------------------------
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Prng")
set prngClient = CreateObject("Chilkat.Prng")
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Ecc")
set eccClient = CreateObject("Chilkat.Ecc")
' privKeyClient is a Chilkat.PrivateKey
Set privKeyClient = eccClient.GenEccKey("secp256r1",prngClient)
If (eccClient.LastMethodSuccess <> 1) Then
    outFile.WriteLine(eccClient.LastErrorText)
    WScript.Quit
End If

' pubKeyClient is a Chilkat.PublicKey
Set pubKeyClient = privKeyClient.GetPublicKey()
success = pubKeyClient.SavePemFile(0,"qa_output/eccClientPub.pem")

' -----------------------------------------------------------------
' (Server-Side) Generate an ECC key, save the public part to a file.
' -----------------------------------------------------------------
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Prng")
set prngServer = CreateObject("Chilkat.Prng")
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Ecc")
set eccServer = CreateObject("Chilkat.Ecc")
' privKeyServer is a Chilkat.PrivateKey
Set privKeyServer = eccServer.GenEccKey("secp256r1",prngServer)
If (eccServer.LastMethodSuccess <> 1) Then
    outFile.WriteLine(eccServer.LastErrorText)
    WScript.Quit
End If

' pubKeyServer is a Chilkat.PublicKey
Set pubKeyServer = privKeyServer.GetPublicKey()
success = pubKeyServer.SavePemFile(0,"qa_output/eccServerPub.pem")

' -----------------------------------------------------------------
' (Client-Side) Generate the shared secret using our private key, and the other's public key.
' -----------------------------------------------------------------

' Imagine that the server sent the public key PEM to the client.
' (This is simulated by loading the server's public key from the file.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.PublicKey")
set pubKeyFromServer = CreateObject("Chilkat.PublicKey")
success = pubKeyFromServer.LoadFromFile("qa_output/eccServerPub.pem")
sharedSecret1 = eccClient.SharedSecretENC(privKeyClient,pubKeyFromServer,"base64")

' -----------------------------------------------------------------
' (Server-Side) Generate the shared secret using our private key, and the other's public key.
' -----------------------------------------------------------------

' Imagine that the client sent the public key PEM to the server.
' (This is simulated by loading the client's public key from the file.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.PublicKey")
set pubKeyFromClient = CreateObject("Chilkat.PublicKey")
success = pubKeyFromClient.LoadFromFile("qa_output/eccClientPub.pem")
sharedSecret2 = eccServer.SharedSecretENC(privKeyServer,pubKeyFromClient,"base64")

' ---------------------------------------------------------
' Examine the shared secrets.  They should be the same.
' Both sides now have a secret that only they know.
' ---------------------------------------------------------
outFile.WriteLine(sharedSecret1)
outFile.WriteLine(sharedSecret2)

outFile.Close