Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>this is my first answer on stackoverflow, so please forgive me if I do it wrong!</p> <p>I can't give you a complete answer, however I had very similar issues when I tried to integrate with PHP - it seems that the format of Apple's certificate files is a little different from that which other software expects (including openssl).</p> <p>Here's how I decrypt an encrypted signature in PHP - I actually extract the modulus and PK from the transmitted public key manually and use that for the RSA stuff, rather than trying to import the key:</p> <pre><code>// Public key format in hex (2 hex chars = 1 byte): //30480241009b63495644db055437602b983f9a9e63d9af2540653ee91828483c7e302348760994e88097d223b048e42f561046c602405683524f00b4cd3eec7e67259c47e90203010001 //&lt;IGNORE&gt;&lt;--------------------------------------------- MODULUS --------------------------------------------------------------------------&gt;&lt;??&gt;&lt; PK &gt; // We're interested in the modulus and the public key. // PK = Public key, probably 65537 // First, generate the sha1 of the hash string: $sha1 = sha1($hashString,true); // Unencode the user's public Key: $pkstr = base64_decode($publicKey); // Skip the &lt;IGNORE&gt; section: $a = 4; // Find the very last occurrence of \x02\x03 which seperates the modulus from the PK: $d = strrpos($pkstr,"\x02\x03"); // If something went wrong, give up: if ($a == false || $d == false) return false; // Extract the modulus and public key: $modulus = substr($pkstr,$a,($d-$a)); $pk = substr($pkstr,$d+2); // 1) Take the $signature from the user // 2) Decode it from base64 to binary // 3) Convert the binary $pk and $modulus into (very large!) integers (stored in strings in PHP) // 4) Run rsa_verify, from http://www.edsko.net/misc/rsa.php $unencoded_signature = rsa_verify(base64_decode($signature), binary_to_number($pk), binary_to_number($modulus), "512"); //Finally, does the $sha1 we calculated match the $unencoded_signature (less any padding bytes on the end)? return ($sha1 == substr($unencoded_signature,-20)); // SHA1 is only 20 bytes, whilst signature is longer than this. </code></pre> <p>The objective-c that generates this public key is: </p> <pre><code>NSData * data = [[SecKeyWrapper sharedWrapper] getPublicKeyBits]; [req addValue:[data base64Encoding] forHTTPHeaderField: @"X-Public-Key"]; data = [[SecKeyWrapper sharedWrapper] getSignatureBytes:[signatureData dataUsingEncoding:NSUTF8StringEncoding]]; [req addValue:[data base64Encoding] forHTTPHeaderField: @"X-Signature"]; </code></pre> <p>Using SecKeyWrapper from Apple's example project CryptoExercise (you can view the file here: <a href="https://developer.apple.com/iphone/library/samplecode/CryptoExercise/listing15.html" rel="nofollow noreferrer">https://developer.apple.com/iphone/library/samplecode/CryptoExercise/listing15.html</a>)</p> <p>I hope this helps?</p>
    singulars
    1. This table or related slice is empty.
    1. POHaving trouble decrypting in C# something encrypted on iPhone using RSA
      singulars
      1. PTQuestion
    1. PTAnswer
    1. This table or related slice is empty.
    1. USBenjie
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    1. COAs Jon Grant suggested, I will inspect the public key bits themselves but the fact is that the iPhone is reading a X509 certificate bundled with the app (not generated on the phone itself) and I find it incredible that the phone would read the public key in differently. I'll settle this by checking the bytes, but I'm going to be awfully surprised if that's the case.
      singulars
      1. PO
      1. USbbrown
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload