SecureString Chilkat2 Perl Reference Documentation

Chilkat2::SecureString

Current Version: 11.7.0

Markdown version of this page for AI tools (v 11.7.0) · all AI docs

Chilkat.SecureString

Store, append, compare, hash, verify, and securely access sensitive string values.

Chilkat.SecureString holds sensitive text in an encrypted in-memory form while still allowing controlled operations on the value. It can append clear-text strings, append text from a StringBuilder, append another SecureString, load text from a file, return the clear-text value when needed, compare secure strings, mark the value read-only, maintain a hash of the current value, and verify a supplied hash against that maintained value.

Encrypted in-memory value

Store sensitive text in a form that is decrypted only when needed for access, modification, comparison, or hashing.

Append safely

Append clear-text strings, StringBuilder content, or another SecureString; the value is then re-encrypted.

Read-only protection

Set ReadOnly to prevent later modification of the secure string.

Hash maintenance

Set MaintainHash to a supported hash algorithm such as sha256, sha512, sha1, or md5.

Hash output and verification

Retrieve the current hash value in an encoding such as hex or Base64, or verify a supplied encoded hash with VerifyHash.

Compare and access

Compare two secure strings with SecStrEquals, or call Access when the clear-text value is required.

Common pattern: Create a SecureString, load or append the sensitive text, set MaintainHash if later verification is needed, and optionally set ReadOnly after the final value is established. Use Access only at the point where the clear-text string is actually needed, and check LastErrorText if an append, file load, hash, or verification operation fails.
Hash note: VerifyHash depends on MaintainHash having already been set so the object maintains an internal hash for the current secure string value.

Object Creation

use Chilkat2;

my $secureString = Chilkat2::SecureString->new;
# or set properties (and RaiseError) at creation:
# my $secureString = Chilkat2::SecureString->new(VerboseLogging => 1, RaiseError => 1);
my $secureString = Chilkat2::SecureString->new(Property => $value, ...);

Creates the object. The optional pairs set writable properties (and RaiseError) in order, as if set one by one; an unknown or read-only name croaks. use Chilkat2; loads every class; the Chilkat2/SecureString.pm file holds only this class's documentation (perldoc Chilkat2::SecureString).

Perl frees the object when its last reference goes (undef $secureString, or the variable going out of scope); there is nothing to close. Objects returned by methods are independent and freed the same way. The class may be subclassed (use parent -norequire, 'Chilkat2::SecureString';): an object is a blessed hash reference whose hash is free for the subclass's own fields.

my $boolVal = $secureString->RaiseError;
$secureString->RaiseError($boolVal);

When false (the default), a method that fails returns false (or undef), and the reason is in LastErrorText. When true, it dies with a Chilkat2::Error instead, as DBI does with its RaiseError. Objects returned by a method inherit the value of the object that returned them.

Errors

A Chilkat2::Error stringifies to the failed call's full LastErrorText, and has the methods text, class ('Chilkat2::SecureString'), method (the method name) and object. Methods that look something up and find nothing return undef without dying (each such method says so), methods that answer a question (HasMember, IsUnlocked, ...) return a plain boolean, and property reads and writes never fail for Chilkat reasons.

Misuse always croaks, with your file and line, whatever RaiseError is: a wrong number of arguments, a reference or undef where a string or number is expected, an object of the wrong class, an out-of-range integer, a string containing a NUL character, a wide character in a byte string, or a write to a read-only property.

Strings are Perl character strings in both directions (length, regexes and :encoding layers see characters); binary data (BinData) is a byte string. Unlocking: call Chilkat2::Global->new->UnlockBundle('...') once at startup.

Properties

DebugLogFilePath
# $strVal is a string
my $strVal = $secureString->DebugLogFilePath;
$secureString->DebugLogFilePath($strVal);

If set to a file path, this property logs the LastErrorText of each Chilkat method or property call to the specified file. This logging helps identify the context and history of Chilkat calls leading up to any crash or hang, aiding in debugging.

Enabling the VerboseLogging property provides more detailed information. This property is mainly used for debugging rare instances where a Chilkat method call causes a hang or crash, which should generally not happen.

Possible causes of hangs include:

  • A timeout property set to 0, indicating an infinite timeout.
  • A hang occurring within an event callback in the application code.
  • An internal bug in the Chilkat code causing the hang.

More Information and Examples
top
LastErrorHtml
# $strVal is a string (read-only)
my $strVal = $secureString->LastErrorHtml;

Provides HTML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorText
# $strVal is a string (read-only)
my $strVal = $secureString->LastErrorText;

Provides plain text information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastErrorXml
# $strVal is a string (read-only)
my $strVal = $secureString->LastErrorXml;

Provides XML-formatted information about the last called method or property. If a method call fails or behaves unexpectedly, check this property for details. Note that information is available regardless of the method call's success.

top
LastMethodSuccess
# $boolVal is a boolean
my $boolVal = $secureString->LastMethodSuccess;
$secureString->LastMethodSuccess($boolVal);

Indicates the success or failure of the most recent method call: 1 means success, 0 means failure. This property remains unchanged by property setters or getters. This method is present to address challenges in checking for null or Nothing returns in certain programming languages. Note: This property does not apply to methods that return integer values or to boolean-returning methods where the boolean does not indicate success or failure.

top
MaintainHash
# $strVal is a string
my $strVal = $secureString->MaintainHash;
$secureString->MaintainHash($strVal);
Introduced in version 9.5.0.71

If set to the name of a hash algorithm, then a hash of the current string value is maintained. This allows for the hash to be verified via the VerifyHash method. Possible hash algorithm names are sha1, sha256, sha384, sha512, md5, md2, ripemd160, ripemd128,ripemd256, and ripemd320.

top
ReadOnly
# $boolVal is a boolean
my $boolVal = $secureString->ReadOnly;
$secureString->ReadOnly($boolVal);
Introduced in version 9.5.0.71

Can be set to 1 to make this secure string read-only (cannot be modified).

top
VerboseLogging
# $boolVal is a boolean
my $boolVal = $secureString->VerboseLogging;
$secureString->VerboseLogging($boolVal);

If set to 1, then the contents of LastErrorText (or LastErrorXml, or LastErrorHtml) may contain more verbose information. The default value is 0. Verbose logging should only be used for debugging. The potentially large quantity of logged information may adversely affect peformance.

top
Version
# $strVal is a string (read-only)
my $strVal = $secureString->Version;

Version of the component/library, such as "10.1.0"

More Information and Examples
top

Methods

Access
# $str is a string or undef
my $str = $secureString->Access();
Introduced in version 9.5.0.71

Returns the clear-text string value.

Returns undef on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
Append
# $str is a string
# $success is true or false
my $success = $secureString->Append($str);
Introduced in version 9.5.0.71

Appends a clear-text string to this secure string. The in-memory data will be decrypted, the string will be appended, and then it will be re-encrypted. Can return 0 if the string has been marked as read-only via the ReadOnly property.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AppendSb
# $sb is a Chilkat2::StringBuilder
# $success is true or false
my $success = $secureString->AppendSb($sb);
Introduced in version 9.5.0.71

Appends a clear-text string contained in a StringBuilder to this secure string. The in-memory data will be decrypted, the string will be appended, and then it will be re-encrypted. Can return 0 if the string has been marked as read-only via the ReadOnly property.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
AppendSecure
# $secStr is a Chilkat2::SecureString
# $success is true or false
my $success = $secureString->AppendSecure($secStr);
Introduced in version 9.5.0.71

Appends the contents of a secure string to this secure string. The in-memory data will be decrypted, the secure string will be appended, and then it will be re-encrypted. Can return 0 if this string has been marked as read-only via the ReadOnly property.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
HashVal
# $encoding is a string
# $str is a string or undef
my $str = $secureString->HashVal($encoding);
Introduced in version 9.5.0.71

Returns the hash value for the current value of this secure string. The $encoding specifies the encoding to be used. It can be any of the binary encoding algorithms, such as base64, hex, and many more listed at Chilkat Binary Encodings

Returns undef on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

More Information and Examples
top
LoadFile
# $path is a string
# $charset is a string
# $success is true or false
my $success = $secureString->LoadFile($path, $charset);
Introduced in version 9.5.0.71

Loads the contents of a file into this secure string. The current contents of this object are replaced with the new text from the file.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
SecStrEquals
# $secStr is a Chilkat2::SecureString
# $success is true or false
my $success = $secureString->SecStrEquals($secStr);
Introduced in version 9.5.0.71

Returns 1 if the $secStr equals the contents of this secure string.

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top
VerifyHash
# $hashVal is a string
# $encoding is a string
# $success is true or false
my $success = $secureString->VerifyHash($hashVal, $encoding);
Introduced in version 9.5.0.71

Verifies the $hashVal against the hash value stored for the current value of this secure string. The MaintainHash property must've previously been set for this secure string to maintain an internal hash. The $encoding specifies the encoding of the $hashVal. It can be any of the binary encoding algorithms, such as base64, hex, and many more listed at Chilkat Binary Encodings

Returns true on success, false on failure; LastErrorText says why. With RaiseError on, a failure dies with a Chilkat2::Error instead (it stringifies to the LastErrorText); the object remains usable either way.

top