Hi Ken,

The public key is generated on Tandem platform using SSH calls from a C program

#include "appsh"
#include "rsah"
#include "pemh"
#include "err1h"
#include
#include
#define KEY_LENGTH 2048
#define PUB_EXP 3
#define PRINT_KEYS
#define WRITE_TO_FILE
int main(void) {
size_t pri_len; /* Length of private key */
size_t pub_len; /* Length of public key */
char *pri_key; /* Private key */
char *pub_key; /* Public key */
char msg[KEY_LENGTH/8]; /* Message to encrypt */
char *encrypt = NULL; /* Encrypted message */
char *decrypt = NULL; /* Decrypted message */
char *err; /* Buffer for any error messages */
RSA *keypair;
BIO *pri;
BIO *pub;
BIO *bp_public, *bp_private;
FILE *out;
FILE *pu;
int ret;
int encrypt_len, elen;


/* Generate key pair */
printf("Generating RSA (%d bits) keypair...", KEY_LENGTH);
fflush(stdout);
keypair = RSA_generate_key(KEY_LENGTH, PUB_EXP, NULL, NULL);
/* To get the C-string PEM form: */
pri = BIO_new(BIO_s_mem());
pub = BIO_new(BIO_s_mem());
PEM_write_bio_RSAPrivateKey(pri, keypair, NULL, NULL, 0, NULL, NULL);
PEM_write_bio_RSAPublicKey(pub, keypair);
pri_len = BIO_pending(pri);
pub_len = BIO_pending(pub);
pri_key = malloc(pri_len + 1);
pub_key = malloc(pub_len + 1);
BIO_read(pri, pri_key, pri_len);
BIO_read(pub, pub_key, pub_len);
pri_key[pri_len] = '\0';
pub_key[pub_len] = '\0';
#ifdef PRINT_KEYS
printf("\n%s\n%s\n", pri_key, pub_key);
#endif
printf("done.\n");

/* 2. save public key using 2 different methods*/

bp_public = BIO_new(BIO_s_mem());
bp_public = BIO_new_file("$db17.srsa.pupem1", "w+");

ret = PEM_write_bio_RSAPublicKey(bp_public, keypair);
if(ret != 1){
goto free_stuff;
}

pu = fopen("$db17.srsa.pupem2", "w+");
PEM_write_RSAPub

Regards

Phil

Hi Phil,

There are some difference between the PublicKey you provided and that the PB used. The PB PublicKey is generated via the following function:
lnv_CrypterObject.AsymmetricGenerateKey(RSA!, 1024, lblb_privKey, lblb_pubKey)

Below is the PublicKey example it generated:
MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEAlZjl7EXsklLY4rKDb7IaovS7ZKC/qSmCNNHgdsFXxmg2Lur3FwH7BF0W9K1pb8mM4GxWS20x2yV25Dl5xMoX8+HFg35qnifjzbJlFq4MuH1RNrxNlg75PKFQ6djXdv/eVbUbq1ATulOyJZkKf+xU916Dztc6Q6V7gWhwF0LJq/gJ6AbPEVRt3+SYBZhu6kjHZUyQc70tNso7lmpuYPhPpjofulVqiXuamiyx+rSM5G1DFLCeAXWZ3qP+oEZwf9kpPa5FlxxdS9da3j6l/BIWX6we7ponuaoVM+ZMn4XYQOasPYXueXZGrHy16h+5PZBobhQnvqFo0dlNkELDqyGz9QIBEQ==

Do you know how the third party program generate the pubkey via OpenSSH?
Could you please let us know the exact function names and the parameter values?

Regards,
Ken

Thanks Miguel, but in your code you are generating the Private and Public keys, whereas I am receiving public key from

another system in order to encrypt my data.

So, I think I'm hitting some formatting error on the public key that I am receiving as it's from a .pem file, and I 

think it needs to be converted so PB17 can process it.

Not sure if it works but at least not the same error:

Blob lblb_data
Blob lblb_privKey
Blob lblb_pubKey
Blob lblb_encrypt

string sPublicKey = '-----BEGIN RSA PUBLIC KEY-----' + '~r~n' + &
'MIIBCgKCAQEA2E7AXucgl0h6kEo7QWgZRuCsTHuroFrIH6oh0emJTBeLsUqqLFu5+LiRvV2QKGIqF9KpiCAatiBEpTSPtXbFlFdCrSsjGg7q/eqkA/sN+FwwtLpRFwMazNwAtJ5YQk1hdFosWkG0beVYpfqfeWHxNAdwS01SujYuZRUzlXnq/OARfLzNketOYRc9TpQvZaeCjbavqmm7VSLn3we3Mezcpj75KP5ozwRCydiBJS1Yy5I3pK+fgWtePZeqenq78Vn+C0n8ZgkQFdqmDUKSGV9BnbKy3+qfKZifF9f1ppcM4r0XMzZeXXOnjAWoK8LGYefz3s9l2ltMKeMd30464/ywqwIDAQAB' + '~r~n' + &
'-----END RSA PUBLIC KEY-----'

lblb_pubkey = Blob(sPublicKey, EncodingAnsi!)
lblb_data = Blob("Test Rsa", EncodingAnsi!)

CrypterObject lnv_CrypterObject
lnv_CrypterObject = Create CrypterObject

// Generate the private key
int li_return
li_return = lnv_CrypterObject.AsymmetricGenerateKey(RSA!, 1024, lblb_privKey, lblb_pubKey)
if li_return = 1 then
messagebox("Success", "Key is generated successfully!")
else
messagebox("Error", "Failed to generate the key!")
end if

messagebox('Private Key', string(lblb_privKey, EncodingAnsi!))

// Encrypt data using RSA
lblb_encrypt = lnv_CrypterObject.AsymmetricEncrypt(RSA!, lblb_data, lblb_pubKey)
messagebox('Encrypted data', string(lblb_encrypt, EncodingAnsi!))

destroy lnv_CrypterObject