~~NOTOC~~ ====== 12. Import/Export ====== This category covers the **exchange of cryptographic materials** between systems, formats, and platforms. ---- ===== Scenarios ===== ^ No. ^ Scenario ^ Description ^ Complexity ^ | 12.1 | [[.:pem_export|PEM Export]] | PEM format export/import | ** | | 12.2 | [[.:pfx_export|PFX/PKCS#12 Export]] | Certificate + key as PFX | *** | | 12.3 | [[.:pkcs7_chain|PKCS#7 Chain]] | Export certificate chains | ** | | 12.4 | [[.:interop|Interoperability]] | Cross-platform exchange | **** | ---- ===== Overview ===== flowchart LR subgraph Formats PEM[PEM/Base64] DER[DER/Binary] PFX[PFX/PKCS#12] P7B[PKCS#7/P7B] end subgraph Contents CERT[Certificate] KEY[Private Key] CHAIN[Chain] CRL[CRL] end CERT --> PEM CERT --> DER CERT --> PFX KEY --> PEM KEY --> PFX CHAIN --> P7B CHAIN --> PEM CRL --> PEM CRL --> DER ---- ===== Format Overview ===== ^ Format ^ File Extension ^ Content ^ Encoding ^ Usage ^ | **PEM** | .pem, .crt, .key | Cert/Key/Chain | Base64 | Linux, OpenSSL | | **DER** | .der, .cer | Single object | Binary | Windows, Java | | **PFX/PKCS#12** | .pfx, .p12 | Cert + Key + Chain | Binary | Windows, .NET | | **PKCS#7** | .p7b, .p7c | Chain (no keys) | Binary/Base64 | Chain distribution | | **JKS** | .jks | Java KeyStore | Binary | Java applications | ---- << [[en:int:pqcrypt:szenarien:schluessel:start|<- 11. Key Management]] | [[en:int:pqcrypt:szenarien:start|^ All Scenarios]] >> {{tag>scenario import export pem pfx pkcs7 interop}} ---- //Wolfgang van der Stille @ EMSR DATA d.o.o. - Post-Quantum Cryptography Professional//