Miol
Miol

Reputation: 83

How to create RSA private key with passphrase in Go?

How to create RSA private key with passphrase in Go?

I read the documentation for the crypto package but I was unable to piece together a solution from it.

Upvotes: 8

Views: 8029

Answers (1)

T. Claverie
T. Claverie

Reputation: 12246

First step, generate a private key. Second step, convert it to PEM format. Third step, encrypt the PEM.

All can be done using Golang's standard library, which is very complete. The code is nothing difficult so I put it here. All there is to it is to know which functions to use.

import (
    "crypto/rand"
    "crypto/rsa"
    "crypto/x509"
    "encoding/pem"
)

func PrivateKeyToEncryptedPEM(bits int, pwd string) ([]byte, error) {
    // Generate the key of length bits
    key, err := rsa.GenerateKey(rand.Reader, bits)
    if err != nil {
        return nil, err
    }

    // Convert it to pem
    block := &pem.Block{
        Type:  "RSA PRIVATE KEY",
        Bytes: x509.MarshalPKCS1PrivateKey(key),
    }

    // Encrypt the pem
    if pwd != "" {
        block, err = x509.EncryptPEMBlock(rand.Reader, block.Type, block.Bytes, []byte(pwd), x509.PEMCipherAES256)
        if err != nil {
            return nil, err
        }
    }

    return pem.EncodeToMemory(block), nil
}

Upvotes: 22

Related Questions