PGPKeyring Component
Properties Methods Events Config Settings Errors
The PGPKeyring component manages PGP keyring files.
Syntax
TsbxPGPKeyring
Remarks
Keyring keep the details of local PGP key collections. A typical keyring consists of two parts, with the first part containing the public keys of other people, and the second part containing the secret keys of the keyring owner (i.e. your secret keys).
PGPKeyring can work with RSA, Elgamal (DH), ECDSA, DSS, and EdDSA keypairs with or without subkeys. Public and private PGP keys of versions 2, 3, 4, 5, and 6 are supported.
Depending on your task at hand, you may need to only use the public part, or both. However, there is a couple of catches here. Some PGP implementations operate with just one keyring file that contains both the public and secret keys. The others sometimes mess-up the keys, with secret key accidentally ending up in the public part of the keyring, or the other way round.
Our suggestion therefore is to load all the keyring files that you have into PGPKeyring using consecutive ImportFromFile (or ImportBytes) calls,
and then look for the keys that match the required parameters in the Keys collection. That would provide fault-tolerant and smooth experience to your customers.
PGPKeyring keyring = new PGPKeyring();
keyring.ImportFromFile("pubring.pkr");
keyring.ImportFromFile("secring.skr");
Once you have loaded your keyring files into the keyring, you can perform the following operations on the keys:
- Iterate over the whole set of keys using Keys collection.
- Add new keys to the keyring using methods such as ImportBytes, ImportPinned, or ImportFromFile.
- Save the updated keyring using ExportBytes or ExportToFile methods.
- Use Select to filter keys by certain criteria (public/private, KeyID) into a separate SelectedKeys list.
- Remove keys from the keyring.
- Assign the keyring keys to properties like PGPWriter.SigningKeys to use them for encryption or signing.
Once you have completed your work with PGPKeyring, dispose of the object or call Reset to clean up all the key information from memory.
Property List
The following is the full list of the properties of the component with short descriptions. Click on the links for further details.
KeyCount | The number of records in the Key arrays. |
KeyBitsInKey | Indicates the key length in bits. |
KeyCanEncrypt | Returns True if this key can be used for encryption. |
KeyCanSign | Returns True if this key can be used for signing. |
KeyCurve | Indicates the elliptic curve associated with a EC key. |
KeyEnabled | Enables or disables this key for use in encryption or signing operation. |
KeyEncryptionAlgorithm | Indicates the symmetric algorithm used to encrypt the secret key. |
KeyHandle | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
KeyIsPublic | Returns True if this key is a public key, and False otherwise. |
KeyIsSecret | Returns True if this key is a secret key, and False otherwise. |
KeyIsSubkey | Returns True if this key is a subkey of another key, and False otherwise. |
KeyKeyFP | The 20-byte fingerprint (hash value) of this key. |
KeyKeyID | Contains a 8-byte key identifier. |
KeyPassphrase | The key protection password. |
KeyPassphraseValid | Use this property to check whether the specified Passphrase is valid and can be used to unlock the secret key. |
KeyPrimaryKeyID | If this key is a subkey ( IsSubkey returns True), this property contains the identifier of the subkey's primary key. |
KeyProtection | Specifies the level of protection applied to the secret key. |
KeyPublicKeyAlgorithm | Specifies the asymmetric algorithm of the key. |
KeyQBits | The length of the DSA Q (legitimate range: 160-512). |
KeyTimestamp | Use this property to check the time the key was generated. |
KeyUsername | Specifies the name of the user bound to this key. |
KeyValidTo | Provide accurate expiration moment indication. |
KeyVersion | Indicates the key version. |
PinnedKeyHandle | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
SelectedKeyCount | The number of records in the SelectedKey arrays. |
SelectedKeyBitsInKey | Indicates the key length in bits. |
SelectedKeyCanEncrypt | Returns True if this key can be used for encryption. |
SelectedKeyCanSign | Returns True if this key can be used for signing. |
SelectedKeyCurve | Indicates the elliptic curve associated with a EC key. |
SelectedKeyEnabled | Enables or disables this key for use in encryption or signing operation. |
SelectedKeyEncryptionAlgorithm | Indicates the symmetric algorithm used to encrypt the secret key. |
SelectedKeyHandle | Allows to get or set a 'handle', a unique identifier of the underlying property object. |
SelectedKeyIsPublic | Returns True if this key is a public key, and False otherwise. |
SelectedKeyIsSecret | Returns True if this key is a secret key, and False otherwise. |
SelectedKeyIsSubkey | Returns True if this key is a subkey of another key, and False otherwise. |
SelectedKeyKeyFP | The 20-byte fingerprint (hash value) of this key. |
SelectedKeyKeyID | Contains a 8-byte key identifier. |
SelectedKeyPassphrase | The key protection password. |
SelectedKeyPassphraseValid | Use this property to check whether the specified Passphrase is valid and can be used to unlock the secret key. |
SelectedKeyPrimaryKeyID | If this key is a subkey ( IsSubkey returns True), this property contains the identifier of the subkey's primary key. |
SelectedKeyProtection | Specifies the level of protection applied to the secret key. |
SelectedKeyPublicKeyAlgorithm | Specifies the asymmetric algorithm of the key. |
SelectedKeyQBits | The length of the DSA Q (legitimate range: 160-512). |
SelectedKeyTimestamp | Use this property to check the time the key was generated. |
SelectedKeyUsername | Specifies the name of the user bound to this key. |
SelectedKeyValidTo | Provide accurate expiration moment indication. |
SelectedKeyVersion | Indicates the key version. |
Method List
The following is the full list of the methods of the component with short descriptions. Click on the links for further details.
Config | Sets or retrieves a configuration setting. |
DoAction | Performs an additional action. |
ExportBytes | Exports the keyring to a byte array. |
ExportToFile | Exports the keyring to disk. |
ImportBytes | Loads a key from a byte array. |
ImportFromFile | Loads a key from a file. |
ImportPinned | Imports a pinned secret key to the keyring. |
Remove | Removes the specified key from the keyring. |
RemoveByID | Removes key by its ID. |
Reset | Creates a new empty keyring. |
Select | Filters a selection of keys from the keyring using a template. |
UpdatePinned | Update a pinned key in the keyring. |
Event List
The following is the full list of the events fired by the component with short descriptions. Click on the links for further details.
Error | Information about errors during PGP key management. |
Notification | This event notifies the application about an underlying control flow event. |
Config Settings
The following is a list of config settings for the component with short descriptions. Click on the links for further details.
Armor | Enables or disables ASCII armouring. |
ArmorBoundary | Specifies the armour boundary/title. |
ArmorHeaders | Specifies armour headers. |
UseLongKeyIDs | Enables long (8-byte) KeyID representation. |
ASN1UseGlobalTagCache | Controls whether ASN.1 module should use a global object cache. |
AssignSystemSmartCardPins | Specifies whether CSP-level PINs should be assigned to CNG keys. |
CheckKeyIntegrityBeforeUse | Enables or disable private key integrity check before use. |
CookieCaching | Specifies whether a cookie cache should be used for HTTP(S) transports. |
Cookies | Gets or sets local cookies for the component. |
DefDeriveKeyIterations | Specifies the default key derivation algorithm iteration count. |
DNSLocalSuffix | The suffix to assign for TLD names. |
EnableClientSideSSLFFDHE | Enables or disables finite field DHE key exchange support in TLS clients. |
GlobalCookies | Gets or sets global cookies for all the HTTP transports. |
HardwareCryptoUsePolicy | The hardware crypto usage policy. |
HttpUserAgent | Specifies the user agent name to be used by all HTTP clients. |
HttpVersion | The HTTP version to use in any inner HTTP client components created. |
IgnoreExpiredMSCTLSigningCert | Whether to tolerate the expired Windows Update signing certificate. |
ListDelimiter | The delimiter character for multi-element lists. |
LogDestination | Specifies the debug log destination. |
LogDetails | Specifies the debug log details to dump. |
LogFile | Specifies the debug log filename. |
LogFilters | Specifies the debug log filters. |
LogFlushMode | Specifies the log flush mode. |
LogLevel | Specifies the debug log level. |
LogMaxEventCount | Specifies the maximum number of events to cache before further action is taken. |
LogRotationMode | Specifies the log rotation mode. |
MaxASN1BufferLength | Specifies the maximal allowed length for ASN.1 primitive tag data. |
MaxASN1TreeDepth | Specifies the maximal depth for processed ASN.1 trees. |
OCSPHashAlgorithm | Specifies the hash algorithm to be used to identify certificates in OCSP requests. |
OldClientSideRSAFallback | Specifies whether the SSH client should use a SHA1 fallback. |
PKICache | Specifies which PKI elements (certificates, CRLs, OCSP responses) should be cached. |
PKICachePath | Specifies the file system path where cached PKI data is stored. |
ProductVersion | Returns the version of the SecureBlackbox library. |
ServerSSLDHKeyLength | Sets the size of the TLS DHE key exchange group. |
StaticDNS | Specifies whether static DNS rules should be used. |
StaticIPAddress[domain] | Gets or sets an IP address for the specified domain name. |
StaticIPAddresses | Gets or sets all the static DNS rules. |
Tag | Allows to store any custom data. |
TLSSessionGroup | Specifies the group name of TLS sessions to be used for session resumption. |
TLSSessionLifetime | Specifies lifetime in seconds of the cached TLS session. |
TLSSessionPurgeInterval | Specifies how often the session cache should remove the expired TLS sessions. |
UseCRLObjectCaching | Specifies whether reuse of loaded CRL objects is enabled. |
UseInternalRandom | Switches between SecureBlackbox-own and platform PRNGs. |
UseLegacyAdESValidation | Enables legacy AdES validation mode. |
UseOCSPResponseObjectCaching | Specifies whether reuse of loaded OCSP response objects is enabled. |
UseOwnDNSResolver | Specifies whether the client components should use own DNS resolver. |
UseSharedSystemStorages | Specifies whether the validation engine should use a global per-process copy of the system certificate stores. |
UseSystemNativeSizeCalculation | An internal CryptoAPI access tweak. |
UseSystemOAEPAndPSS | Enforces or disables the use of system-driven RSA OAEP and PSS computations. |
UseSystemRandom | Enables or disables the use of the OS PRNG. |
XMLRDNDescriptorName[OID] | Defines an OID mapping to descriptor names for the certificate's IssuerRDN or SubjectRDN. |
XMLRDNDescriptorPriority[OID] | Specifies the priority of descriptor names associated with a specific OID. |
XMLRDNDescriptorReverseOrder | Specifies whether to reverse the order of descriptors in RDN. |
XMLRDNDescriptorSeparator | Specifies the separator used between descriptors in RDN. |
KeyCount Property (PGPKeyring Component)
The number of records in the Key arrays.
Syntax
__property int KeyCount = { read=FKeyCount };
Default Value
0
Remarks
This property controls the size of the following arrays:
- KeyBitsInKey
- KeyCanEncrypt
- KeyCanSign
- KeyCurve
- KeyEnabled
- KeyEncryptionAlgorithm
- KeyHandle
- KeyIsPublic
- KeyIsSecret
- KeyIsSubkey
- KeyKeyFP
- KeyKeyID
- KeyPassphrase
- KeyPassphraseValid
- KeyPrimaryKeyID
- KeyProtection
- KeyPublicKeyAlgorithm
- KeyQBits
- KeyTimestamp
- KeyUsername
- KeyValidTo
- KeyVersion
This property is read-only and not available at design time.
Data Type
Integer
KeyBitsInKey Property (PGPKeyring Component)
Indicates the key length in bits.
Syntax
__property int KeyBitsInKey[int KeyIndex] = { read=FKeyBitsInKey };
Default Value
2048
Remarks
Indicates the key length in bits.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
KeyCanEncrypt Property (PGPKeyring Component)
Returns True if this key can be used for encryption.
Syntax
__property bool KeyCanEncrypt[int KeyIndex] = { read=FKeyCanEncrypt };
Default Value
false
Remarks
Returns True if this key can be used for encryption.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyCanSign Property (PGPKeyring Component)
Returns True if this key can be used for signing.
Syntax
__property bool KeyCanSign[int KeyIndex] = { read=FKeyCanSign };
Default Value
false
Remarks
Returns True if this key can be used for signing.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyCurve Property (PGPKeyring Component)
Indicates the elliptic curve associated with a EC key.
Syntax
__property String KeyCurve[int KeyIndex] = { read=FKeyCurve };
Default Value
""
Remarks
Indicates the elliptic curve associated with a EC key.
Supported values:
SB_PGP_CURVE_P256 | P256 | |
SB_PGP_CURVE_P384 | P384 | |
SB_PGP_CURVE_P521 | P521 | |
SB_PGP_CURVE_ED25519 | ED25519 | |
SB_PGP_CURVE_CURVE25519 | CURVE25519 | |
SB_PGP_CURVE_BRAINPOOLP256R1 | BRAINPOOLP256 | |
SB_PGP_CURVE_BRAINPOOLP512R1 | BRAINPOOLP512 |
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyEnabled Property (PGPKeyring Component)
Enables or disables this key for use in encryption or signing operation.
Syntax
__property bool KeyEnabled[int KeyIndex] = { read=FKeyEnabled };
Default Value
false
Remarks
Enables or disables this key for use in encryption or signing operation.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyEncryptionAlgorithm Property (PGPKeyring Component)
Indicates the symmetric algorithm used to encrypt the secret key.
Syntax
__property String KeyEncryptionAlgorithm[int KeyIndex] = { read=FKeyEncryptionAlgorithm };
Default Value
"AES128"
Remarks
Indicates the symmetric algorithm used to encrypt the secret key.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyHandle Property (PGPKeyring Component)
Allows to get or set a 'handle', a unique identifier of the underlying property object.
Syntax
__property __int64 KeyHandle[int KeyIndex] = { read=FKeyHandle };
Default Value
0
Remarks
Allows to get or set a 'handle', a unique identifier of the underlying property object. Use this property to assign objects of the same type in a quicker manner, without copying them fieldwise.
When you pass a handle of one object to another, the source object is copied to the destination rather than assigned. It is safe to get rid of the original object
after such operation.
pdfSigner.setSigningCertHandle(certMgr.getCertHandle());
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Long64
KeyIsPublic Property (PGPKeyring Component)
Returns True if this key is a public key, and False otherwise.
Syntax
__property bool KeyIsPublic[int KeyIndex] = { read=FKeyIsPublic };
Default Value
false
Remarks
Returns True if this key is a public key, and False otherwise.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyIsSecret Property (PGPKeyring Component)
Returns True if this key is a secret key, and False otherwise.
Syntax
__property bool KeyIsSecret[int KeyIndex] = { read=FKeyIsSecret };
Default Value
false
Remarks
Returns True if this key is a secret key, and False otherwise.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyIsSubkey Property (PGPKeyring Component)
Returns True if this key is a subkey of another key, and False otherwise.
Syntax
__property bool KeyIsSubkey[int KeyIndex] = { read=FKeyIsSubkey };
Default Value
false
Remarks
Returns True if this key is a subkey of another key, and False otherwise.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyKeyFP Property (PGPKeyring Component)
The 20-byte fingerprint (hash value) of this key.
Syntax
__property String KeyKeyFP[int KeyIndex] = { read=FKeyKeyFP };
Default Value
""
Remarks
The 20-byte fingerprint (hash value) of this key.
KeyFP could be used to distinguish two keys with the same KeyID.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyKeyID Property (PGPKeyring Component)
Contains a 8-byte key identifier.
Syntax
__property String KeyKeyID[int KeyIndex] = { read=FKeyKeyID };
Default Value
""
Remarks
Contains a 8-byte key identifier.
It is quite rare that IDs of two keys collide. If that happens, their fingerprints (KeyFP) can be used for distinguish between the keys. Please note that many PGP implementations show only 4 lowest bytes of the KeyID to the user.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyPassphrase Property (PGPKeyring Component)
The key protection password.
Syntax
__property String KeyPassphrase[int KeyIndex] = { read=FKeyPassphrase };
Default Value
""
Remarks
The key protection password.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyPassphraseValid Property (PGPKeyring Component)
Use this property to check whether the specified Passphrase is valid and can be used to unlock the secret key.
Syntax
__property bool KeyPassphraseValid[int KeyIndex] = { read=FKeyPassphraseValid };
Default Value
false
Remarks
Use this property to check whether the specified KeyPassphrase is valid and can be used to unlock the secret key.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
KeyPrimaryKeyID Property (PGPKeyring Component)
If this key is a subkey ( IsSubkey returns True), this property contains the identifier of the subkey's primary key.
Syntax
__property String KeyPrimaryKeyID[int KeyIndex] = { read=FKeyPrimaryKeyID };
Default Value
""
Remarks
If this key is a subkey (KeyIsSubkey returns True), this property contains the identifier of the subkey's primary key.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyProtection Property (PGPKeyring Component)
Specifies the level of protection applied to the secret key.
Syntax
__property TsbxPGPKeyringKeyProtections KeyProtection[int KeyIndex] = { read=FKeyProtection };
enum TsbxPGPKeyringKeyProtections { pptNone=0, pptLow=1, pptNormal=2, pptHigh=3 };
Default Value
pptNone
Remarks
Specifies the level of protection applied to the secret key.
Allowed values:
pptNone | 0 | Key is not encrypted |
pptLow | 1 | Only the password hash is used to derive the secret key |
pptNormal | 2 | Password hash with salt is used to derive the secret key |
pptHigh | 3 | Hash from multiple passwords and salt are used for key derivation |
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
KeyPublicKeyAlgorithm Property (PGPKeyring Component)
Specifies the asymmetric algorithm of the key.
Syntax
__property String KeyPublicKeyAlgorithm[int KeyIndex] = { read=FKeyPublicKeyAlgorithm };
Default Value
""
Remarks
Specifies the asymmetric algorithm of the key.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyQBits Property (PGPKeyring Component)
The length of the DSA Q (legitimate range: 160-512).
Syntax
__property int KeyQBits[int KeyIndex] = { read=FKeyQBits };
Default Value
0
Remarks
The length of the DSA Q (legitimate range: 160-512).
This parameter corresponds to the hash algorithm used with the key. For example, if the value of Q is 256, SHA-256 will be used.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
KeyTimestamp Property (PGPKeyring Component)
Use this property to check the time the key was generated.
Syntax
__property String KeyTimestamp[int KeyIndex] = { read=FKeyTimestamp };
Default Value
""
Remarks
Use this property to check the time the key was generated. The date and time are stored and retrieved in Universal Coordinate Time (UTC).
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyUsername Property (PGPKeyring Component)
Specifies the name of the user bound to this key.
Syntax
__property String KeyUsername[int KeyIndex] = { read=FKeyUsername };
Default Value
""
Remarks
Specifies the name of the user bound to this key.
The PGP username is typically represented with a full name and an email address, but generally can be any non-empty string.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyValidTo Property (PGPKeyring Component)
Provide accurate expiration moment indication.
Syntax
__property String KeyValidTo[int KeyIndex] = { read=FKeyValidTo };
Default Value
"0"
Remarks
Provide accurate expiration moment indication. This is different to expires property which only contains expiration time in days in old keys.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
String
KeyVersion Property (PGPKeyring Component)
Indicates the key version.
Syntax
__property int KeyVersion[int KeyIndex] = { read=FKeyVersion };
Default Value
0
Remarks
Indicates the key version.
The key version refers to the version of the public-key packet format as defined in RFC 4880.
Only four versions are currently allowed here: 3, 4, 5 and 6. It is recommended that all new keys are created with version of 6.
The KeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the KeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
PinnedKeyHandle Property (PGPKeyring Component)
Allows to get or set a 'handle', a unique identifier of the underlying property object.
Syntax
__property __int64 PinnedKeyHandle = { read=FPinnedKeyHandle, write=FSetPinnedKeyHandle };
Default Value
0
Remarks
Allows to get or set a 'handle', a unique identifier of the underlying property object. Use this property to assign objects of the same type in a quicker manner, without copying them fieldwise.
When you pass a handle of one object to another, the source object is copied to the destination rather than assigned. It is safe to get rid of the original object
after such operation.
pdfSigner.setSigningCertHandle(certMgr.getCertHandle());
This property is not available at design time.
Data Type
Long64
SelectedKeyCount Property (PGPKeyring Component)
The number of records in the SelectedKey arrays.
Syntax
__property int SelectedKeyCount = { read=FSelectedKeyCount };
Default Value
0
Remarks
This property controls the size of the following arrays:
- SelectedKeyBitsInKey
- SelectedKeyCanEncrypt
- SelectedKeyCanSign
- SelectedKeyCurve
- SelectedKeyEnabled
- SelectedKeyEncryptionAlgorithm
- SelectedKeyHandle
- SelectedKeyIsPublic
- SelectedKeyIsSecret
- SelectedKeyIsSubkey
- SelectedKeyKeyFP
- SelectedKeyKeyID
- SelectedKeyPassphrase
- SelectedKeyPassphraseValid
- SelectedKeyPrimaryKeyID
- SelectedKeyProtection
- SelectedKeyPublicKeyAlgorithm
- SelectedKeyQBits
- SelectedKeyTimestamp
- SelectedKeyUsername
- SelectedKeyValidTo
- SelectedKeyVersion
This property is read-only and not available at design time.
Data Type
Integer
SelectedKeyBitsInKey Property (PGPKeyring Component)
Indicates the key length in bits.
Syntax
__property int SelectedKeyBitsInKey[int SelectedKeyIndex] = { read=FSelectedKeyBitsInKey };
Default Value
2048
Remarks
Indicates the key length in bits.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
SelectedKeyCanEncrypt Property (PGPKeyring Component)
Returns True if this key can be used for encryption.
Syntax
__property bool SelectedKeyCanEncrypt[int SelectedKeyIndex] = { read=FSelectedKeyCanEncrypt };
Default Value
false
Remarks
Returns True if this key can be used for encryption.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyCanSign Property (PGPKeyring Component)
Returns True if this key can be used for signing.
Syntax
__property bool SelectedKeyCanSign[int SelectedKeyIndex] = { read=FSelectedKeyCanSign };
Default Value
false
Remarks
Returns True if this key can be used for signing.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyCurve Property (PGPKeyring Component)
Indicates the elliptic curve associated with a EC key.
Syntax
__property String SelectedKeyCurve[int SelectedKeyIndex] = { read=FSelectedKeyCurve };
Default Value
""
Remarks
Indicates the elliptic curve associated with a EC key.
Supported values:
SB_PGP_CURVE_P256 | P256 | |
SB_PGP_CURVE_P384 | P384 | |
SB_PGP_CURVE_P521 | P521 | |
SB_PGP_CURVE_ED25519 | ED25519 | |
SB_PGP_CURVE_CURVE25519 | CURVE25519 | |
SB_PGP_CURVE_BRAINPOOLP256R1 | BRAINPOOLP256 | |
SB_PGP_CURVE_BRAINPOOLP512R1 | BRAINPOOLP512 |
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyEnabled Property (PGPKeyring Component)
Enables or disables this key for use in encryption or signing operation.
Syntax
__property bool SelectedKeyEnabled[int SelectedKeyIndex] = { read=FSelectedKeyEnabled };
Default Value
false
Remarks
Enables or disables this key for use in encryption or signing operation.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyEncryptionAlgorithm Property (PGPKeyring Component)
Indicates the symmetric algorithm used to encrypt the secret key.
Syntax
__property String SelectedKeyEncryptionAlgorithm[int SelectedKeyIndex] = { read=FSelectedKeyEncryptionAlgorithm };
Default Value
"AES128"
Remarks
Indicates the symmetric algorithm used to encrypt the secret key.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyHandle Property (PGPKeyring Component)
Allows to get or set a 'handle', a unique identifier of the underlying property object.
Syntax
__property __int64 SelectedKeyHandle[int SelectedKeyIndex] = { read=FSelectedKeyHandle };
Default Value
0
Remarks
Allows to get or set a 'handle', a unique identifier of the underlying property object. Use this property to assign objects of the same type in a quicker manner, without copying them fieldwise.
When you pass a handle of one object to another, the source object is copied to the destination rather than assigned. It is safe to get rid of the original object
after such operation.
pdfSigner.setSigningCertHandle(certMgr.getCertHandle());
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Long64
SelectedKeyIsPublic Property (PGPKeyring Component)
Returns True if this key is a public key, and False otherwise.
Syntax
__property bool SelectedKeyIsPublic[int SelectedKeyIndex] = { read=FSelectedKeyIsPublic };
Default Value
false
Remarks
Returns True if this key is a public key, and False otherwise.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyIsSecret Property (PGPKeyring Component)
Returns True if this key is a secret key, and False otherwise.
Syntax
__property bool SelectedKeyIsSecret[int SelectedKeyIndex] = { read=FSelectedKeyIsSecret };
Default Value
false
Remarks
Returns True if this key is a secret key, and False otherwise.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyIsSubkey Property (PGPKeyring Component)
Returns True if this key is a subkey of another key, and False otherwise.
Syntax
__property bool SelectedKeyIsSubkey[int SelectedKeyIndex] = { read=FSelectedKeyIsSubkey };
Default Value
false
Remarks
Returns True if this key is a subkey of another key, and False otherwise.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyKeyFP Property (PGPKeyring Component)
The 20-byte fingerprint (hash value) of this key.
Syntax
__property String SelectedKeyKeyFP[int SelectedKeyIndex] = { read=FSelectedKeyKeyFP };
Default Value
""
Remarks
The 20-byte fingerprint (hash value) of this key.
KeyFP could be used to distinguish two keys with the same KeyID.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyKeyID Property (PGPKeyring Component)
Contains a 8-byte key identifier.
Syntax
__property String SelectedKeyKeyID[int SelectedKeyIndex] = { read=FSelectedKeyKeyID };
Default Value
""
Remarks
Contains a 8-byte key identifier.
It is quite rare that IDs of two keys collide. If that happens, their fingerprints (KeyFP) can be used for distinguish between the keys. Please note that many PGP implementations show only 4 lowest bytes of the KeyID to the user.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyPassphrase Property (PGPKeyring Component)
The key protection password.
Syntax
__property String SelectedKeyPassphrase[int SelectedKeyIndex] = { read=FSelectedKeyPassphrase };
Default Value
""
Remarks
The key protection password.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyPassphraseValid Property (PGPKeyring Component)
Use this property to check whether the specified Passphrase is valid and can be used to unlock the secret key.
Syntax
__property bool SelectedKeyPassphraseValid[int SelectedKeyIndex] = { read=FSelectedKeyPassphraseValid };
Default Value
false
Remarks
Use this property to check whether the specified SelectedKeyPassphrase is valid and can be used to unlock the secret key.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Boolean
SelectedKeyPrimaryKeyID Property (PGPKeyring Component)
If this key is a subkey ( IsSubkey returns True), this property contains the identifier of the subkey's primary key.
Syntax
__property String SelectedKeyPrimaryKeyID[int SelectedKeyIndex] = { read=FSelectedKeyPrimaryKeyID };
Default Value
""
Remarks
If this key is a subkey (SelectedKeyIsSubkey returns True), this property contains the identifier of the subkey's primary key.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyProtection Property (PGPKeyring Component)
Specifies the level of protection applied to the secret key.
Syntax
__property TsbxPGPKeyringSelectedKeyProtections SelectedKeyProtection[int SelectedKeyIndex] = { read=FSelectedKeyProtection };
enum TsbxPGPKeyringSelectedKeyProtections { pptNone=0, pptLow=1, pptNormal=2, pptHigh=3 };
Default Value
pptNone
Remarks
Specifies the level of protection applied to the secret key.
Allowed values:
pptNone | 0 | Key is not encrypted |
pptLow | 1 | Only the password hash is used to derive the secret key |
pptNormal | 2 | Password hash with salt is used to derive the secret key |
pptHigh | 3 | Hash from multiple passwords and salt are used for key derivation |
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
SelectedKeyPublicKeyAlgorithm Property (PGPKeyring Component)
Specifies the asymmetric algorithm of the key.
Syntax
__property String SelectedKeyPublicKeyAlgorithm[int SelectedKeyIndex] = { read=FSelectedKeyPublicKeyAlgorithm };
Default Value
""
Remarks
Specifies the asymmetric algorithm of the key.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyQBits Property (PGPKeyring Component)
The length of the DSA Q (legitimate range: 160-512).
Syntax
__property int SelectedKeyQBits[int SelectedKeyIndex] = { read=FSelectedKeyQBits };
Default Value
0
Remarks
The length of the DSA Q (legitimate range: 160-512).
This parameter corresponds to the hash algorithm used with the key. For example, if the value of Q is 256, SHA-256 will be used.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
SelectedKeyTimestamp Property (PGPKeyring Component)
Use this property to check the time the key was generated.
Syntax
__property String SelectedKeyTimestamp[int SelectedKeyIndex] = { read=FSelectedKeyTimestamp };
Default Value
""
Remarks
Use this property to check the time the key was generated. The date and time are stored and retrieved in Universal Coordinate Time (UTC).
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyUsername Property (PGPKeyring Component)
Specifies the name of the user bound to this key.
Syntax
__property String SelectedKeyUsername[int SelectedKeyIndex] = { read=FSelectedKeyUsername };
Default Value
""
Remarks
Specifies the name of the user bound to this key.
The PGP username is typically represented with a full name and an email address, but generally can be any non-empty string.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyValidTo Property (PGPKeyring Component)
Provide accurate expiration moment indication.
Syntax
__property String SelectedKeyValidTo[int SelectedKeyIndex] = { read=FSelectedKeyValidTo };
Default Value
"0"
Remarks
Provide accurate expiration moment indication. This is different to expires property which only contains expiration time in days in old keys.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
String
SelectedKeyVersion Property (PGPKeyring Component)
Indicates the key version.
Syntax
__property int SelectedKeyVersion[int SelectedKeyIndex] = { read=FSelectedKeyVersion };
Default Value
0
Remarks
Indicates the key version.
The key version refers to the version of the public-key packet format as defined in RFC 4880.
Only four versions are currently allowed here: 3, 4, 5 and 6. It is recommended that all new keys are created with version of 6.
The SelectedKeyIndex parameter specifies the index of the item in the array. The size of the array is controlled by the SelectedKeyCount property.
This property is read-only and not available at design time.
Data Type
Integer
Config Method (PGPKeyring Component)
Sets or retrieves a configuration setting.
Syntax
String __fastcall Config(String ConfigurationString);
Remarks
Config is a generic method available in every component. It is used to set and retrieve configuration settings for the component.
These settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the component, access to these internal properties is provided through the Config method.
To set a configuration setting named PROPERTY, you must call Config("PROPERTY=VALUE"), where VALUE is the value of the setting expressed as a string. For boolean values, use the strings "True", "False", "0", "1", "Yes", or "No" (case does not matter).
To read (query) the value of a configuration setting, you must call Config("PROPERTY"). The value will be returned as a string.
DoAction Method (PGPKeyring Component)
Performs an additional action.
Syntax
String __fastcall DoAction(String ActionID, String ActionParams);
Remarks
DoAction is a generic method available in every component. It is used to perform an additional action introduced after the product major release. The list of actions is not fixed, and may be flexibly extended over time.
The unique identifier (case insensitive) of the action is provided in the ActionID parameter.
ActionParams contains the value of a single parameter, or a list of multiple parameters for the action in the form of PARAM1=VALUE1;PARAM2=VALUE2;....
Common ActionIDs:
Action | Parameters | Returned value | Description |
ResetTrustedListCache | none | none | Clears the cached list of trusted lists. |
ResetCertificateCache | none | none | Clears the cached certificates. |
ResetCRLCache | none | none | Clears the cached CRLs. |
ResetOCSPResponseCache | none | none | Clears the cached OCSP responses. |
ExportBytes Method (PGPKeyring Component)
Exports the keyring to a byte array.
Syntax
DynamicArray<Byte> __fastcall ExportBytes(bool Secret);
Remarks
Use this method to export the keyring to a byte array. PGP software typically uses two files to store keyrings. Use Secret parameter to specify which part of the keyring you would like to export (public or secret).
ExportToFile Method (PGPKeyring Component)
Exports the keyring to disk.
Syntax
void __fastcall ExportToFile(String FileName, bool Secret);
Remarks
Use this method to export the keyring to disk. PGP software typically uses two files to store keyrings, public and private.
ImportBytes Method (PGPKeyring Component)
Loads a key from a byte array.
Syntax
void __fastcall ImportBytes(DynamicArray<Byte> Keyring);
Remarks
Use this method to load a key, either public or secret, from a byte array.
ImportFromFile Method (PGPKeyring Component)
Loads a key from a file.
Syntax
void __fastcall ImportFromFile(String KeyringFile);
Remarks
Use this method to load a key, either public or secret, from a file.
ImportPinned Method (PGPKeyring Component)
Imports a pinned secret key to the keyring.
Syntax
void __fastcall ImportPinned();
Remarks
Use this method to import a key provided via PinnedKey to the keyring. This can be a public or secret key.
Remove Method (PGPKeyring Component)
Removes the specified key from the keyring.
Syntax
void __fastcall Remove(int Index);
Remarks
Use this method to remove a key from the keyring. Use Index to pass the index of the key to be removed.
RemoveByID Method (PGPKeyring Component)
Removes key by its ID.
Syntax
void __fastcall RemoveByID(String KeyID);
Remarks
Call this method to remove the specified key from the keyring.
Reset Method (PGPKeyring Component)
Creates a new empty keyring.
Syntax
void __fastcall Reset();
Remarks
Use this method to initialize a new empty keyring.
Select Method (PGPKeyring Component)
Filters a selection of keys from the keyring using a template.
Syntax
void __fastcall Select(String Filter, bool SecretOnly, int MaxCount);
Remarks
Use this method to get a list of keys that satisfy the Filter criteria. The filter should follow the "Name=Value" format, where Name can be one of the following:
- userid
- fp or fingerprint
- keyid
Set SecretOnly to True to only search for secret keys. MaxCount allows to limit the number of keys returned.
Once the method completes, the keys that match the criteria will be available in SelectedKeys property.
UpdatePinned Method (PGPKeyring Component)
Update a pinned key in the keyring.
Syntax
void __fastcall UpdatePinned();
Remarks
Use this method to update a key provided via PinnedKey in the keyring. This can be a public or secret key.
Error Event (PGPKeyring Component)
Information about errors during PGP key management.
Syntax
typedef struct { int ErrorCode; String Description; } TsbxPGPKeyringErrorEventParams; typedef void __fastcall (__closure *TsbxPGPKeyringErrorEvent)(System::TObject* Sender, TsbxPGPKeyringErrorEventParams *e); __property TsbxPGPKeyringErrorEvent OnError = { read=FOnError, write=FOnError };
Remarks
The event is fired in case of exceptional conditions during key management.
ErrorCode contains an error code and Description contains a textual description of the error.
Notification Event (PGPKeyring Component)
This event notifies the application about an underlying control flow event.
Syntax
typedef struct { String EventID; String EventParam; } TsbxPGPKeyringNotificationEventParams; typedef void __fastcall (__closure *TsbxPGPKeyringNotificationEvent)(System::TObject* Sender, TsbxPGPKeyringNotificationEventParams *e); __property TsbxPGPKeyringNotificationEvent OnNotification = { read=FOnNotification, write=FOnNotification };
Remarks
The component fires this event to let the application know about some event, occurrence, or milestone in the component. For example, it may fire to report completion of the document processing. The list of events being reported is not fixed, and may be flexibly extended over time.
The unique identifier of the event is provided in the EventID parameter. EventParam contains any parameters accompanying the occurrence. Depending on the type of the component, the exact action it is performing, or the document being processed, one or both may be omitted.
Config Settings (PGPKeyring Component)
The component accepts one or more of the following configuration settings. Configuration settings are similar in functionality to properties, but they are rarely used. In order to avoid "polluting" the property namespace of the component, access to these internal properties is provided through the Config method.PGPKeyring Config Settings
Base Config Settings
You can switch this property off to improve performance if your project only uses known, good private keys.
Supported values are:
off | No caching (default) | |
local | Local caching | |
global | Global caching |
This setting only applies to sessions negotiated with TLS version 1.3.
Supported values are:
file | File | |
console | Console | |
systemlog | System Log (supported for Android only) | |
debugger | Debugger (supported for VCL for Windows and .Net) |
Supported values are:
time | Current time | |
level | Level | |
package | Package name | |
module | Module name | |
class | Class name | |
method | Method name | |
threadid | Thread Id | |
contenttype | Content type | |
content | Content | |
all | All details |
Supported filter names are:
exclude-package | Exclude a package specified in the value | |
exclude-module | Exclude a module specified in the value | |
exclude-class | Exclude a class specified in the value | |
exclude-method | Exclude a method specified in the value | |
include-package | Include a package specified in the value | |
include-module | Include a module specified in the value | |
include-class | Include a class specified in the value | |
include-method | Include a method specified in the value |
none | No flush (caching only) | |
immediate | Immediate flush (real-time logging) | |
maxcount | Flush cached entries upon reaching LogMaxEventCount entries in the cache. |
Supported values are:
none | None (by default) | |
fatal | Severe errors that cause premature termination. | |
error | Other runtime errors or unexpected conditions. | |
warning | Use of deprecated APIs, poor use of API, 'almost' errors, other runtime situations that are undesirable or unexpected, but not necessarily "wrong". | |
info | Interesting runtime events (startup/shutdown). | |
debug | Detailed information on flow of through the system. | |
trace | More detailed information. |
The default value of this setting is 100.
none | No rotation | |
deleteolder | Delete older entries from the cache upon reaching LogMaxEventCount | |
keepolder | Keep older entries in the cache upon reaching LogMaxEventCount (newer entries are discarded) |
Supported Values:
certificate | Enables caching of certificates. |
crl | Enables caching of Certificate Revocation Lists (CRLs). |
ocsp | Enables caching of OCSP (Online Certificate Status Protocol) responses. |
Example (default value):
PKICache=certificate,crl,ocsp
In this example, the component caches certificates, CRLs, and OCSP responses.
The default value is an empty string - no cached PKI data is stored on disk.
Example:
PKICachePath=C:\Temp\cache
In this example, the cached PKI data is stored in the C:\Temp\cache directory.
Supported values are:
none | No static DNS rules (default) | |
local | Local static DNS rules | |
global | Global static DNS rules |
This setting only applies to certificates originating from a Windows system store.
The property accepts comma-separated values where the first descriptor name is used when the OID is mapped, and subsequent values act as aliases for parsing.
Syntax:
Config("XMLRDNDescriptorName[OID]=PrimaryName,Alias1,Alias2");
Where:
OID: The Object Identifier from the certificate's IssuerRDN or SubjectRDN that you want to map.
PrimaryName: The main descriptor name used in the XML signature when the OID is encountered.
Alias1, Alias2, ...: Optional alternative names recognized during parsing.
Usage Examples:
Map OID 2.5.4.5 to SERIALNUMBER:
Config("XMLRDNDescriptorName[2.5.4.5]=SERIALNUMBER");
Map OID 1.2.840.113549.1.9.1 to E, with aliases EMAIL and EMAILADDRESS:
Config("XMLRDNDescriptorName[1.2.840.113549.1.9.1]=E,EMAIL,EMAILADDRESS");
Trappable Errors (PGPKeyring Component)
PGPKeyring Errors
1048577 | Invalid parameter (SB_ERROR_INVALID_PARAMETER) |
1048578 | Invalid configuration (SB_ERROR_INVALID_SETUP) |
1048579 | Invalid state (SB_ERROR_INVALID_STATE) |
1048580 | Invalid value (SB_ERROR_INVALID_VALUE) |
1048581 | Private key not found (SB_ERROR_NO_PRIVATE_KEY) |
1048582 | Cancelled by the user (SB_ERROR_CANCELLED_BY_USER) |
1048583 | The file was not found (SB_ERROR_NO_SUCH_FILE) |
1048584 | Unsupported feature or operation (SB_ERROR_UNSUPPORTED_FEATURE) |
1048585 | General error (SB_ERROR_GENERAL_ERROR) |
27262977 | The file was not found (SB_ERROR_PGP_FILE_NOT_EXISTS) |
27262978 | Invalid signing key (SB_ERROR_PGP_INVALID_KEY) |
27262980 | No secret key is available (SB_ERROR_PGP_NO_SECRET_KEY) |
27262982 | The operation is not supported on a subkey (SB_ERROR_PGP_OPERATION_ON_SUBKEY) |