// initialize
dim h as new CCCryptorMBS(CCCryptorMBS.kCCEncrypt, CCCryptorMBS.kCCAlgorithmAES128, 0, "Hello12312345678")

if h.Lasterror<>0 then break

// destination memoryblock

dim m as new MemoryBlock(100)
dim Position as Uint64 = 0
dim BytesLeft as UInt64 = m.Size

// add a few bytes
dim q as UInt64 = 0

h.Update "Hello World!1234", m, BytesLeft, q
if h.Lasterror<>0 then break

Position = Position + q
BytesLeft = BytesLeft - q

// now finalize:
q = 0

dim dp as ptr = m.AddressPtrMBS(Position)

h.Final dp, BytesLeft, q
if h.Lasterror<>0 then break

Position = Position + q
BytesLeft = BytesLeft - q

// and show result
dim d as string = m.StringValue(0, Position)
MsgBox EncodingToHexMBS(d)

This interface provides access to a number of symmetric encryption algorithms. Symmetric encryption algorithms come in two "flavors" - block ciphers, and stream ciphers. Block ciphers process data (while both encrypting and decrypting) in discrete chunks of data called blocks; stream ciphers operate on arbitrary sized data.

The object declared in this interface, CCCryptorMBS, provides access to both block ciphers and stream ciphers with the same API; however some options are available for block ciphers that do not apply to stream ciphers.

The general operation of a CCCryptor is: initialize it with raw key data and other optional fields with Constructor(); process input data via one or more calls to Update(), each of which may result in output data being written to caller-supplied memory; and obtain possible remaining output data with Final(). The CCCryptor is disposed of via Destructor(), or it can be reused (with the same key data as provided to Constructor()) by calling Reset().

One option for block ciphers is padding, as defined in PKCS7; when padding is enabled, the total amount of data encrypted does not have to be an even multiple of the block size, and the actual length of plaintext is calculated during decryption.

Another option for block ciphers is Cipher Block Chaining, known as CBC mode. When using CBC mode, an Initialization Vector (IV) is provided along with the key when starting an encrypt or decrypt operation. If CBC mode is selected and no IV is provided, an IV of all zeroes will be used.

CCCryptorMBS also implements block bufferring, so that individual calls to Update() do not have to provide data whose length is aligned to the block size. (If padding is disabled, encrypting with block ciphers does require that the *total* length of data input to Update() call(s) be aligned to the block size.)

A given CCCryptorMBS can only be used by one thread at a time; multiple threads can use safely different CCCryptors at the same time.

This class uses the CommonCrypto interface which is available on Mac OS X 10.5 or newer and also on iOS. So you can use it to get the same results on both operation systems. Also as you simply use Apple provided encryption, you don't need to apply for an export license for this classes here.