Skip to Content
author's profile photo Former Member
Former Member

Use of SAPCRYPTOLIB

Hi,

I need to encrypt files from ABAP to send them to Bank CitiBank. They demand the file encrypted with the standard PKCS#7. I downloaded the SAPCRYPTOLIB library and the installation instructions, but I do not know how I may use this library in my program ABAP. Someone could help me, please?

Thanks,

María C.

Add a comment
10|10000 characters needed characters exceeded

Assigned Tags

Related questions

2 Answers

  • Best Answer
    author's profile photo Former Member
    Former Member
    Posted on Apr 12, 2007 at 03:15 PM
    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Maria

      There is no API available in ABAP to utilize all the cryptographic operations implemented by the SAPCRYPTOLIB, directly (i.e. single algorithms such as 3DES).

      Only the SSF API can be used.

      SSF (Secure Store and Forward) provides functions for digital signatures and encryption.

      You can use program SSF02 (via SA38) to test those functions.

      as you most probably know cryptographic software is subject of export control (similiar to military weapons - sounds weird but we cannot change it).

      Therefore the cryptographic functions are not shipped with the product but with an external library (SAPCRYPTOLIB) that can be installed optionally.

      The SSF functions are always provided by an external library: either SAPSECULIB (part of the standard shipment) or SAPCRYPTOLIB or a (certified) 3rd party SSF library (required when using SSF functionality on the client side).

      There are ABAP function modules for hash algorithms (implemented in the kernel) and there are ABAP function modules for SSF functions (implemented in the SSF library). Dependent on the SSF library in use various SSF functions are available.

      SSF (Secure Store and Forward) is designed to operate on (persistent) data - in contrast to SSL (and SNC) which provide encryption services for transient data (i.e. only during data transmission). If data should remain encrypted beyond the scope of data transmission then SSF (or XML encryption) is the right choice.

      An important question is:

      how is your data structured? Is all the data encrypted or are only parts of it encrypted (=> typical use case for XML encryption)? And how does the recipient determine the sender (in order to use the correct corresponding key)?

      That's why usually not just an algorithm (here: triple DES) is required but an infrastructure.

      Since you are referring to Web Services I'd expect that the data is encrypted using XML encryption. Am I right?

      See also

      encrypt file on application server

      Decrypt using Triple-DES algorithm

      If it helps Reward with points

      Regards Rk

  • author's profile photo Former Member
    Former Member
    Posted on Apr 12, 2007 at 06:37 PM

    Hi Rk.

    Thanks for your help.

    I have two question.

    1. Do you explain me How I must to install SAPCRYPTOLIB, in server application. I found a document but I don't understand .

    2. I downloaded the sapcryptolib library but this is in a file with CAR extension. Do you know How I may uncompress this file?

    Maria C

    Add a comment
    10|10000 characters needed characters exceeded

    • Former Member

      Hi Maria,

      1. Do you explain me How I must to install SAPCRYPTOLIB, in server application. I found a document but I don't understand .

      I´ve the same problem. I´m following the sap note 510007

      2. I downloaded the sapcryptolib library but this is in a file with CAR extension. Do you know How I may uncompress this file?

      You´ve to uncompress with the sapcar program. You have to use the right version for your system x86 or x64

Before answering

You should only submit an answer when you are proposing a solution to the poster's problem. If you want the poster to clarify the question or provide more information, please leave a comment instead, requesting additional details. When answering, please include specifics, such as step-by-step instructions, context for the solution, and links to useful resources. Also, please make sure that you answer complies with our Rules of Engagement.
You must be Logged in to submit an answer.

Up to 10 attachments (including images) can be used with a maximum of 1.0 MB each and 10.5 MB total.