cpp_export_import_key.cpp

/*****************************************************************************************
*  cpp_export_import_key.cpp
*
*  Note: See Tricryption Engine SDK for details on how to set the project environment.
*
******************************************************************************************/

#include <iostream>
#include "teconnection.h"
#include "teagent.h"
#include "teexception.h"
#include "teauthldapctx.h"
#include "teutil_keycert.h"
#include "teauthuserctx.h"
#include "teadmin.h"
#include "teparameter.h"
#include "teadmin_config.h"
#include "tekey.h"

using namespace ERUCES;
using namespace std;


auto_ptr<TEConnection> te_conn;
string strIV = "";


void connect_native(string strServer, int nPort, string strUsername, string strPassword)
{
    te_conn = TEConnection::createInstance(TEConnection::SecureConnection);

    auto_ptr<TEUserAuthenticationContext> ctx = TEUserAuthenticationContext::getInstance();
    ctx->setUser(strUsername);
    ctx->setPasswd(strPassword);

    te_conn->open(strServer, nPort, *ctx.operator->());
    cout << "Connected to " << strServer  << " at " << nPort << " as " << strUsername << endl;
}


void connect_native_admin(string strServer, int nPort, string strUsername, string strPassword)
{
    te_conn = TEConnection::createInstance(TEConnection::SecureConnection);

    auto_ptr<TEUserAuthenticationContext> ctx = TEUserAuthenticationContext::getInstance();
    ctx->setUser(strUsername);
    ctx->setPasswd(strPassword);

    te_conn->open(strServer, nPort, *ctx.operator->());
    cout << "Connected to " << strServer  << " at " << nPort << " as " << strUsername << endl;
}


void connect_cert_PKCS12(string strServer, int nPort, string strPKCS12_PKey_File, string strPassword)
{
    te_conn = TEConnection::createInstance(TEConnection::SSLMutualConnection);  // SSLMutualConnection = 0x00000004

    // Read Certificate and Private Key from PKCS#12 private key file.
    string strCertChain = "";
    string strPrivKey   = "";
    TEKeyCertUtil::loadFromFile(strPKCS12_PKey_File, strPassword, strCertChain, strPrivKey, false);

    // Open connection to the server for certificate user
    te_conn->open(strServer, nPort, strCertChain, strPrivKey);

    cout << "Connected to " << strServer  << " at " << nPort << " as certificate user" << endl;
}


void disconnect()
{
    te_conn->close();
    cout << "Disconnected from server" << endl;
}


void setTrustedServerOfflinePolicy(int nTrustedServerSystemId, bool isOffline) {
    TEParameter param;
    char buffer[40];
    sprintf(buffer, "TrustedServer.%d.offline", nTrustedServerSystemId);

    TEAdminConfig admin;
    admin.attachConnection(te_conn.get());
    string strKey = buffer;
    string strValue;
    isOffline ? strValue = "YES" : strValue = "NO";
    param.setKey(strKey);
    param.setValue(strValue);
    admin.setParameter(param);

    admin.detachConnection();

    if (isOffline)
        cout << "Trusted server offline policy was set." << endl;
    else
        cout << "Trusted server offline policy was unset." << endl;

}


void EncryptData(string& strData, string& strHiddenLink) {

    TEAgent teagent;
    teagent.attachConnection(te_conn.get());

    cout << "Original data = " << strData.c_str() << endl;
    cout << "Original data size = " << strData.size() << endl;

    teagent.encryptData(strData, strHiddenLink, strIV);
    teagent.detachConnection();

    cout << "Encrypted data = ";
    int i;
    for(i=0; i<strData.size(); i++) {
        cout << "["  << (int)strData[i] << "]";
    }
    cout << endl;
    cout << "Encrypted size = " << strData.size() << endl;

    cout << "HiddenLink = ";
    for(i=0; i<strHiddenLink.size(); i++) {
        cout << "["  << (int)strHiddenLink[i] << "]";
    }
    cout << endl;
    cout << "HiddenLink size = " << strHiddenLink.size() << endl;
}


void DecryptData(string& strData, string& strHiddenLink) {

    TEAgent teagent;
    teagent.attachConnection(te_conn.get());
    teagent.detachConnection();

    teagent.decryptData(strData, strHiddenLink, strIV);
    cout << "Decrypted data = " << strData.c_str() << endl;
    cout << "Decrypted size = " << strData.size() << endl;
}



void ExportKeyWithServerName(string& strHiddenLink, string& strExportedKey, string strTrustedServerName, unsigned int type) {

    // Attach Connection to the Key class.
    TEKey tekey;
    tekey.attachConnection(te_conn.get());

    if(type == 0) {
        KeyPair strPair = make_pair<string *, string *>(&strHiddenLink, &strExportedKey);
        KeyPair pairArray[1];
        pairArray[0] = strPair;
        tekey.exportKey(strTrustedServerName, pairArray, sizeof(pairArray)/sizeof(KeyPair));
    }
    else {
        string * hlArray[1];
        hlArray[0] = &strHiddenLink;

        tekey.exportKeyFormatted(strTrustedServerName, hlArray, 1, strExportedKey, type);
    }

    tekey.detachConnection();
}



void ImportKey(string& strHiddenLink, string& strExportedKey, unsigned int type) {

    // Attach Connection to the Key class. You can later on detach connection or disconnect it
    TEKey tekey;
    tekey.attachConnection(te_conn.get());

    if(type == 0) {
        KeyPair strPair = make_pair<string *, string *>(&strHiddenLink, &strExportedKey);
        KeyPair pairArray[1];
        pairArray[0] = strPair;
        tekey.importKey(pairArray, sizeof(pairArray)/sizeof(KeyPair));
    }
    else {
        tekey.importKeyFormatted(strExportedKey, type);
    }

    tekey.detachConnection();
}




int main()
{

    string strExportServer  = "xyangxpvm";
    string strImportServer  = "xyang1";
    int nExportSystemId = 1912;
    int nPort       = 8888;
    int nAdminPort  = 8888;

    string strPKCS12_PKey_File2 = "C:\\Documents and Settings\\Administrator\\pkcs12_private_key2.pfx";  // PKCS#12 private key file.
    string strPKCS12_PKey_File  = "C:\\Documents and Settings\\Administrator\\pkcs12_private_key.pfx";   // PKCS#12 private key file.

    unsigned int type = 0;  // 0 - NORMAL, can export and import keys.
                            // 1 - SMIME, can only export keys.
                            // 2 - XML, can export and import keys.

    string strData = "this is a test string.";
    string strHiddenLink;
    string strExportedKey;


    try
    {
        // Encrypt data
        cout << endl << "Encrypt data at export server:" << endl;
        connect_native(strExportServer, nPort, "ls", "password");
        //connect_cert_PKCS12(strExportServer, nAdminPort, strPKCS12_PKey_File2, "password");
        EncryptData(strData, strHiddenLink);
        disconnect();


        // Export key
        cout << endl << "Export key:" << endl;
        connect_native_admin(strExportServer, nAdminPort, "ls", "password");
        //connect_cert_PKCS12(strExportServer, nAdminPort, strPKCS12_PKey_File2, "password");
        ExportKeyWithServerName(strHiddenLink, strExportedKey, strImportServer, type);
        cout << "export key done." << endl;
        cout << "HiddenLink = ";
        int i;
        for(i=0; i<strHiddenLink.size(); i++) {
            cout << "["  << (int)strHiddenLink[i] << "]";
        }
        cout << endl;
        cout << "HiddenLink size = " << strHiddenLink.size() << endl;
        cout << "Exported key = ";
        for(i=0; i<strExportedKey.size(); i++) {
            cout << "["  << (int)strExportedKey[i] << "]";
        }
        cout << endl;
        cout << "Exported key size = " << strExportedKey.size() << endl;
        disconnect();


        if (type != 1)
        {
            // Set trusted server offline policy
            cout << endl << "Set trusted server offline policy:" << endl;
            connect_native_admin(strImportServer, nAdminPort, "admin", "password1A");
            setTrustedServerOfflinePolicy(nExportSystemId, true);
            disconnect();

            // Import key
            cout << endl << "Import key:" << endl;
            connect_native_admin(strImportServer, nAdminPort, "ls", "password");
            //connect_cert_PKCS12(strImportServer, nAdminPort, strPKCS12_PKey_File, "password");
            ImportKey(strHiddenLink, strExportedKey, type);
            cout << "import key done." << endl;
            disconnect();

            // Decrypt data
            cout << endl << "Decrypt data at import server:" << endl;
            connect_native(strImportServer, nPort, "ls", "password");
            //connect_cert_PKCS12(strImportServer, nAdminPort, strPKCS12_PKey_File, "password");
            DecryptData(strData, strHiddenLink);
            disconnect();

            // Unset trusted server offline policy
            cout << endl << "Unset trusted server offline policy:" << endl;
            connect_native_admin(strImportServer, nAdminPort, "admin", "password1A");
            setTrustedServerOfflinePolicy(nExportSystemId, false);
            disconnect();
        }

    }
    catch (TEException &e)
    {
        cout <<  e.getAllMessages() << endl;
    }
    catch (...)
    {
        cout << "Unexpected error" << endl;
    }

    return 0;
}

/*************************************************************************************
Encrypt data at export server:
Connected to xyangxpvm at 8080 as ls
Original data = this is a test string.
Original data size = 22
Encrypted data = [-56][-105][122][79][3][-96][-58][38][-102][-120][-120][-23][-1
16][112][-61][-52][47][-87][-15][3][-64][10][-52][93]
Encrypted size = 24
HiddenLink = [0][0][7][120][-36][-97][-106][8][-119][45][-48][50][12][36][-20][-
12][-85][122][89][16][-13][-115][28][81][81][-54][-59][-32][-13][53][-126][92][1
9][-49][74][21][-62][23][-13][-10]
HiddenLink size = 40
Disconnected from server

Export key:
Connected to xyangxpvm at 8888 as ls
export key done.
HiddenLink = [0][0][7][120][-36][-97][-106][8][-119][45][-48][50][12][36][-20][-
12][-85][122][89][16][-13][-115][28][81][81][-54][-59][-32][-13][53][-126][92][1
9][-49][74][21][-62][23][-13][-10]
HiddenLink size = 40
Exported key = [-98][68][-19][-86][19][127][-71][102][-52][-39][19][-84][-87][90
][100][58][-125][66][95][42][85][-108][11][113][-23][-112][37][-3][10][-93][-67]
[-69][107][-29][79][95][-26][3][-9][37][-80][98][-126][26][-107][22][70][29][32]
[-8][-42][46][-93][-127][30][-98][-46][36][-27][-32][31][14][14][-111][22][-91][
-23][78][72][17][-96][75][35][18][116][-40][-122][-113][-13][-28][48][112][-62][
-125][44][25][12][-64][-12][-49][-60][-91][-37][125][55][-95][-89][61][49][34][-
60][-101][-46][-93][-110][-46][-8][-2][107][79][-15][-38][-26][110][-113][-93][-
114][-11][-25][-53][94][1][2][-56][85][-109][73][-68]
Exported key size = 128
Disconnected from server

Set trusted server offline policy:
Connected to xyang1 at 8888 as admin
Trusted server offline policy was set.
Disconnected from server

Import key:
Connected to xyang1 at 8888 as ls
import key done.
Disconnected from server

Decrypt data at import server:
Connected to xyang1 at 8080 as ls
Decrypted data = this is a test string.
Decrypted size = 22
Disconnected from server

Unset trusted server offline policy:
Connected to xyang1 at 8888 as admin
Trusted server offline policy was unset.
Disconnected from server
Press any key to continue
*************************************************************************************/