Lockbox 3 load public key not possible - stream re

Well i generated a keypair with openssl

openssl genrsa -des3 -out _private.pem 1024

openssl rsa -pubout -in _private.pem -out public.pem

Public

Private

When i try to load the key with the following procedure it always says "Stream reading Error" at line Signatory1.LoadKeysFromStream(f, [partPrivate]);

var
  f: TMemoryStream;
  Signatory1: TSignatory;
  codecRSA: TCodec;
  CryptographicLibrary1: TCryptographicLibrary;
  base64Ciphertext: string;
begin
   f:= TMemoryStream.Create;
   f.LoadFromFile('C:\OpenSSL-Win32\bin\private.pem');

  codecRSA :=TCodec.Create(nil);
  CryptographicLibrary1 := TCryptographicLibrary.Create(nil);
  Signatory1 :=TSignatory.Create(nil);

  //=============TCodec===================
  codecRSA.CryptoLibrary  := CryptographicLibrary1;
  codecRSA.StreamCipherId := 'native.RSA';
  codecRSA.ChainModeId:= 'native.CBC';
  codecRSA.AsymetricKeySizeInBits := 1024;

  //====Signatory1=====================
  Signatory1.Codec :=codecRSA;
  //===Load public key=============
  Signatory1.LoadKeysFromStream(f, [partPrivate]);
end;

Any suggestions? I am using Delphi XE7 and the latest release of Lockbox 3 from Github

回答1:

In my experience, LockBox 3 needs a PKCS#1 public key when working with OpenSSL generated keys. You must convert the public key to PKCS#1 before Lockbox3 can load it. (OpenSSL generates a PKCS#8 key). Use the RSAPublicKey keyword.

openssl rsa -pubin -in yourpublickey -RSAPublicKey_out -out publicpkcs1

https://www.openssl.org/docs/apps/rsa.html

http://lockbox.seanbdurkin.id.au/tiki-view_forum_thread.php?comments_parentId=298&display=print

回答2:

After loading the stream you should reset it to the beginning before handing it over to LoadKeysFromStream.

  //====Signatory1=====================
  Signatory1.Codec :=codecRSA;
  //===Load public key=============
  f.Position := 0;
  Signatory1.LoadKeysFromStream(f, [partPrivate]);