In an opened KeyStore window, select the key pair entry and click on
the right mouse button - if the private key is not unlocked you will be
prompted for the private key password. From the popup menu select
Export > Export Private
Key action. The exported Private Key type can be PKCS #8
(both binary and PEM) or OpenSSL - this is selectable from the right side
of the file chooser window. The exported key can also be encrypted (in
this case an encryption algorithm and a password must be provided) or not.
For PKCS #8 one can further chose to PEM encode the file, by using the
File Chooser filter (Files of type: PKCS #8 Private Key Files (PEM
encoded) (*.pkcs8).
The Private Key will be exported in the selected file, having the following formats, depending on the export Private Key Type and file chooser filter selection:
PKCS #8 Private Key Files;
PKCS #8 Private Key Files (PEM encoded);
OpenSSL Private Key Files (PEM encoded).
The encryption algorithm is dependent on the selected export Private Key Type and CERTivity automatically changes this in the list.
Table 5.3. Encryption Algorithm for Private Keys
| Type | Encryption Algorithm |
|---|---|
| PKCS #8 | PBE_SHA1_2DES |
| PBE_SHA1_3DES | |
| PBE_SHA1_RC2_128 | |
| PBE_SHA1_RC2_40 | |
| PBE_SHA1_RC4_128 | |
| PBE_SHA1_RC4_40 | |
| OpenSSL | AES-128-CBC |
| AES-128-CFB | |
| AES-128-ECB | |
| AES-128-OFB | |
| BF-CBC | |
| BF-CFB | |
| BF-ECB | |
| BF-OFB | |
| DES-CBC | |
| DES-CFB | |
| DES-ECB | |
| DES-EDE-CBC | |
| DES-EDE-CFB | |
| DES-EDE-ECB | |
| DES-EDE-OFB | |
| DES-EDE | |
| DES-EDE3-CBC | |
| DES-EDE3-CFB | |
| DES-EDE3-ECB | |
| DES-EDE3-OFB | |
| DES-EDE3 | |
| DES-OFB | |
| RC2-40-CBC | |
| RC2-64-CBC | |
| RC2-CBC | |
| RC2-CFB | |
| RC2-ECB | |
| RC2-OFB |
A screenshot for the export Private Key action is depicted below:
