Session_WrapKey

This API wraps key.

URL

./Session_WrapKey

Input Parameters

Sample SOAP Parameters

<prot:Session_WrapKey>
    <keyName>AESKey</keyName>
    <keyUseForWrap>RSAKey</keyUseForWrap>
    <!--Optional:-->
    <wrapFormatPadding>SHA256</wrapFormatPadding>
</prot:Session_WrapKey>

Output

Wrap key bytes.

<ns2: Session_WrapKeyResponse xmlns:ns2="http://dsws.org/protectappws/">36E409F7993906344FA0DC560475086F485163857ACD41752651ACDF236BDDE73F9859CBF42A744D27603F5869D3DBD29C97005B973517DB76761AF8915D0B13</ns2: Session_WrapKeyResponse>

Note

cxf-manifest.jar should be included in the Java client build path while calling Session_WrapKey web services.

Unwrap Key using OpenSSL

1. The Session_WrapKey API generates output in hex format. To unwrap the key, convert it into byte array and then write the Base64 encoded wrapped key to file as shown here.

   String wrappedKeytxt=<hexdata>;
   byte[] wrappedKey =IngrianProvider.hex2ByteArray(wrappedKeytxt);
   Base64.encodeToFile(wrappedKey, <filePathWhereBase64EncodedWrappedKeyIsWritten>);

   Copy

2. Based on the padding scheme, run the following command.

   PKCS1 v1.5 (default)

   openssl enc -in <filePathWhereBase64EncodedWrappedKeyIsWritten> -out <filepathForbinarytext> -d -a
   openssl rsautl -decrypt -in <filepathForbinarytext> -out <filePathToUnwrappedKey> -inkey <pemFilePathToPrivKey>

   Copy

   SHA256

   openssl enc -in <filePathWhereBase64EncodedWrappedKeyIsWritten> -out <filepathForbinarytext> -d -a
   openssl pkeyutl -decrypt -inkey <pemFilePathToPrivKey> -in <filepathForbinarytext> -out <filePathToUnwrappedKey> -pkeyopt rsa_padding_mode:oaep -pkeyopt rsa_oaep_md:sha256 -pkeyopt rsa_mgf1_md:sha256

   Copy

3. Read the unwrapped key bytes from the file. Convert the byte array into hex format as shown here.

   byte keyArr[]=Files.readAllBytes(Paths.get(<filePathToUnwrappedKey>);
   String unwrappedKey= IngrianProvider.byteArray2Hex(keyArr));

   Copy