Assuming this is what you want. RSA with RSA_PKCS1_PADDING has known flaws which is exploitable though the Bleichenbacker’s CCA attack. The improved version claims to crack RSA with as little as 15,000 attempts (assuming it has access to an oracle of some sort).
Anyway what you are trying to do is:
- Read a PEM encoded certificate with a public key
- Encrypt a buffer of data (max 245 for PKCS1 padding)
- Base64 encode it.
You can use the public_key module to achieve this. From memory you do something like this:
def security(plaintext, certificate) do
#1) Decode the certificate. This assumes only one entry in the cert.
[pem_entry] = :public_key.pem_decode(certificate)
plk = :public_key.pem_entry_decode(pem_entry)
#2) Encrypt the plaintext
ciphertext = :public_key.encrypt_public(plaintext, plk, [{:rsa_pad, :rsa_pkcs1_padding}])
#3) Base64 encode and return the result
:base64.encode(ciphertext)
end
end
