The advanced utilities workflow component, RSA-OAEP key wrap can be used for wrapping (hybrid-encrypting) data. The wrapped result is stored in a variable. The payload of the workflow is not used and not altered.
The component has these parameters:
Public key / certificate (PEM or Base64)
This is the public key which is to be used for the wrapping. This can be the public key in a base64 encoding or in PEM (Privacy-Enhanced Mail) format.
Input to wrap (Base64)
This is the data, that should be wrapped (hybrid-encrypted). You can e.g. here refer to the contents of a variable via an XPath expression. The input data must be base64 encoded.
Output variable: wrapped key (Base64)
This states the name of the variable, which is to receive the wrapped data. In the example above the variable, MyVar will contain the wrapped data after the component has run.
OAEP hash (MGF1 matches)
Here you state the hash algorithm for the wrapping. The same value must be selected when the data is unwrapped. The parameter is optional and the default value is: SHA-256. Possible values are:
SHA-256 (KSeF)
SHA-1
SHA-384
SHA-512