-
-
Notifications
You must be signed in to change notification settings - Fork 2.4k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
update DEMO-0011 to be about RSA key size
- Loading branch information
1 parent
1fd3157
commit b3b9f2d
Showing
6 changed files
with
213 additions
and
135 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,37 +1,90 @@ | ||
| import SwiftUI | ||
| import CommonCrypto | ||
| import Foundation | ||
| import Security | ||
|
|
||
| struct MastgTest { | ||
| static func mastgTest(completion: @escaping (String) -> Void) { | ||
| let key = "0123456789abcdef01234567" // 24-byte key for 3DES | ||
| let data = "This is a sample text".data(using: .utf8)! | ||
|
|
||
| // Create a buffer for encrypted data | ||
| var encryptedBytes = [UInt8](repeating: 0, count: data.count + kCCBlockSize3DES) | ||
| var numBytesEncrypted: size_t = 0 | ||
|
|
||
| let cryptStatus = data.withUnsafeBytes { dataBytes in | ||
| key.withCString { keyBytes in | ||
| CCCrypt( | ||
| CCOperation(kCCEncrypt), // Encrypt | ||
| CCAlgorithm(kCCAlgorithm3DES), // 3DES Algorithm | ||
| CCOptions(kCCOptionPKCS7Padding), // PKCS7 Padding | ||
| keyBytes, kCCKeySize3DES, // Key and key length | ||
| nil, // Initialization Vector (optional) | ||
| dataBytes.baseAddress, data.count, // Input data | ||
| &encryptedBytes, encryptedBytes.count, // Output data | ||
| &numBytesEncrypted // Number of bytes encrypted | ||
| ) | ||
| } | ||
|
|
||
| // Step 1: Generate an RSA key pair with a 1024-bit key size | ||
| let tag = "org.owasp.mas.rsa-1014".data(using: .utf8)! | ||
| let keyAttributes: [String: Any] = [ | ||
| kSecAttrKeyType as String: kSecAttrKeyTypeRSA, | ||
| kSecAttrKeySizeInBits as String: 1024, // Using 1024-bit RSA key | ||
| kSecPrivateKeyAttrs as String: | ||
| [kSecAttrIsPermanent as String: true, // to store it in the Keychain | ||
| kSecAttrApplicationTag as String: tag] // to find and retrieve it from the Keychain later | ||
| ] | ||
|
|
||
| var error: Unmanaged<CFError>? | ||
| guard let privateKey = SecKeyCreateRandomKey(keyAttributes as CFDictionary, &error) else { | ||
| completion("Failed to generate private key: \(String(describing: error))") | ||
| return | ||
| } | ||
|
|
||
| guard let publicKey = SecKeyCopyPublicKey(privateKey) else { | ||
| completion("Failed to generate public key") | ||
| return | ||
| } | ||
|
|
||
| // Convert the private key to data (DER format) | ||
| guard let privateKeyData = SecKeyCopyExternalRepresentation(privateKey, &error) as Data? else { | ||
| completion("Failed to extract private key: \(String(describing: error))") | ||
| return | ||
| } | ||
|
|
||
| if cryptStatus == kCCSuccess { | ||
| let encryptedData = Data(bytes: encryptedBytes, count: numBytesEncrypted) | ||
| let encryptedHex = encryptedData.map { String(format: "%02hhx", $0) }.joined() | ||
| let value = "Original:\n\n \(String(data: data, encoding: .utf8)!)\n\nEncrypted (Hex):\n \(encryptedHex)" | ||
| completion(value) | ||
| } else { | ||
| completion("Encryption failed with status: \(cryptStatus)") | ||
| // Encode the private key for display | ||
| //let privateKeyBase64 = privateKeyData.base64EncodedString() | ||
| let privateKeyHex = privateKeyData.map { String(format: "%02hhx", $0) }.joined() | ||
|
|
||
| // Convert the public key to data (DER format) | ||
| guard let publicKeyData = SecKeyCopyExternalRepresentation(publicKey, &error) as Data? else { | ||
| completion("Failed to extract public key: \(String(describing: error))") | ||
| return | ||
| } | ||
|
|
||
| // Encode the public key for display | ||
| // let publicKeyBase64 = publicKeyData.base64EncodedString() | ||
| let publicKeyHex = publicKeyData.map { String(format: "%02hhx", $0) }.joined() | ||
|
|
||
| // Data to sign | ||
| let dataToSign = "This is a sample text".data(using: .utf8)! | ||
|
|
||
| // Step 2: Sign the data with the private key | ||
| guard let signature = SecKeyCreateSignature( | ||
| privateKey, | ||
| SecKeyAlgorithm.rsaSignatureMessagePKCS1v15SHA256, | ||
| dataToSign as CFData, | ||
| &error | ||
| ) else { | ||
| completion("Signing failed: \(String(describing: error))") | ||
| return | ||
| } | ||
|
|
||
| // Convert signature to hex string for display | ||
| let signatureHex = (signature as Data).map { String(format: "%02hhx", $0) }.joined() | ||
|
|
||
| // Step 3: Verify the signature with the public key | ||
| let verificationStatus = SecKeyVerifySignature( | ||
| publicKey, | ||
| SecKeyAlgorithm.rsaSignatureMessagePKCS1v15SHA256, | ||
| dataToSign as CFData, | ||
| signature as CFData, | ||
| &error | ||
| ) | ||
|
|
||
| let verificationResult = verificationStatus ? "Signature is valid." : "Signature is invalid." | ||
|
|
||
| let value = """ | ||
| Original: \(String(data: dataToSign, encoding: .utf8)!) | ||
| Private Key (Hex): \(privateKeyHex) | ||
| Public Key (Hex): \(publicKeyHex) | ||
| Signature (Hex): \(signatureHex) | ||
| Verification: \(verificationResult) | ||
| """ | ||
|
|
||
| completion(value) | ||
| } | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,9 +1,9 @@ | ||
| │ 0x1000040c0 00008052 mov w0, 0 -> kCCEncrypt (0 for encryption) | ||
| │ 0x1000040c4 41008052 mov w1, 2 -> kCCAlgorithm3DES (2 for 3DES) | ||
| │ 0x1000040c8 22008052 mov w2, 1 -> kCCOptionPKCS7Padding (1 for PKCS7 padding) | ||
| │ 0x1000040cc e30317aa mov x3, x23 -> key (pointer to the encryption key) | ||
| │ 0x1000040d0 04038052 mov w4, 0x18 -> keyLength (0x18 or 24 bytes for 3DES) | ||
| │ 0x1000040d4 050080d2 mov x5, 0 -> iv (0 or NULL, implying no initialization vector) | ||
| │ 0x1000040d8 e60316aa mov x6, x22 -> dataIn (pointer to the input data to be encrypted) | ||
| │ 0x1000040dc e70319aa mov x7, x25 -> dataOut (pointer to the output buffer where encrypted data will be stored) | ||
| │ 0x1000040e0 790d0094 bl sym.imp.CCCrypt -> Call to CCCrypt function | ||
| │ │ 0x10000484c 080942f9 ldr x8, reloc.kSecAttrKeySizeInBits ; 0x10000c410 -> Load the address of kSecAttrKeySizeInBits into x8 | ||
| │ │ 0x100004850 000140f9 ldr x0, [x8] | ||
| │ │ 0x100004854 e30b0094 bl fcn.1000077e0 | ||
| │ │ 0x100004858 800605a9 stp x0, x1, [x20, 0x50] | ||
| │ │ 0x10000485c 48000090 adrp x8, reloc.Foundation.__DataStorage._bytes.allocator__UnsafeMutableRawPointer______ ; 0x10000c000 | ||
| │ │ 0x100004860 089d41f9 ldr x8, reloc.Swift.Int ; 0x10000c338 | ||
| │ │ 0x100004864 883e00f9 str x8, [x20, 0x78] | ||
| │ │ 0x100004868 08808052 mov w8, 0x400 -> Move 0x400 (1024 in decimal) into w8, the lower 32 bits of x8 | ||
| │ │ 0x10000486c 883200f9 str x8, [x20, 0x60] -> Store the final value (1024-bit key size) into memory |
Oops, something went wrong.