1. Home

Product groups

Support

  

RSA sign with MD5 encryption (General questions)

by Erick Daniel @, (7449 days ago)

Hi there:

I would like some advise with this. I am trying to do a RSA sign with MD5 encryption. I currently did this:

'Declaracion de variables
Dim Crypt As New wodCryptCom
Dim bufIn As New MemBlob
Dim bufOut As New MemBlob
Dim Key As New Keys

'Carga de la firma
Key.Load pem.key , abcde123

'Establezco cadena
bufIn.Text = CADENA|16|20|36|50

'Se hace el firmado (con la llave RSA)
Crypt.Type = RSA
Crypt.SecretKey = Key.PrivateKey(RSAkey)
Crypt.Sign bufIn, bufOut
MsgBox bufOut.ToBase64

If I do that, is the component hashing the chain in MD5 and then, signing it with the RSA key? Thank you.

locked

Re: RSA sign with MD5 encryption

by Jasmine, (7449 days ago) @ Erick Daniel

Erick,

correct. Component will not do MD5 hashing, but call to OpenSSL's RSA_sign will do that.

Regards.

locked

Re: RSA sign with MD5 encryption

by Erick @, (7448 days ago) @ Jasmine

Erick,

correct. Component will not do MD5 hashing, but call to OpenSSL's RSA_sign will do that.

Regards.

Great, thanks for the info.

Two more questions:

1. How can I load the .cer file to let me verify the cipher text I just got? (The public key is in the certificate store).

2. Should I digest and then sign the string? It will be a very big string (500 chars, more or less) and the other part (the people I will send the cipher text in Base64) shall be able to verify it with my certificate, supposedly under a standard. (I think its PKCS#1). While I am pretty confident that I should hash the strig and then send the hash to the Sign function, I just would like to know the answer (The call to Sign seems to fail if I send a string that big).

locked

Re: RSA sign with MD5 encryption

by Jasmine, (7448 days ago) @ Erick

1. How can I load the .cer file to let me verify the cipher text I just got? (The public key is in the certificate store).

This doesn't sound right. Where is the private key? In Windows certificate store? But then there must be the same certificate too.

Can you somehow get it in the PFX file? That one would hold private key too.

2. Should I digest and then sign the string? It will be a very big string (500 chars, more or less) and the other part (the people I will send the cipher text in Base64) shall be able to verify it with my certificate, supposedly under a standard. (I think its PKCS#1). While I am pretty confident that I should hash the strig and then send the hash to the Sign function, I just would like to know the answer (The call to Sign seems to fail if I send a string that big).

I suggest you do. Hash it with MD5 or SHA1, in which case you have only 16-20 bytes to sign. Make sure other side does the same hashing method on same data before they verify the signature.

Hope it helps.

locked

Re: RSA sign with MD5 encryption

by Erick Daniel @, (7448 days ago) @ Jasmine

1. How can I load the .cer file to let me verify the cipher text I just got? (The public key is in the certificate store).

This doesn't sound right. Where is the private key? In Windows certificate store? But then there must be the same certificate too.

Can you somehow get it in the PFX file? That one would hold private key too.

2. Should I digest and then sign the string? It will be a very big string (500 chars, more or less) and the other part (the people I will send the cipher text in Base64) shall be able to verify it with my certificate, supposedly under a standard. (I think its PKCS#1). While I am pretty confident that I should hash the strig and then send the hash to the Sign function, I just would like to know the answer (The call to Sign seems to fail if I send a string that big).

I suggest you do. Hash it with MD5 or SHA1, in which case you have only 16-20 bytes to sign. Make sure other side does the same hashing method on same data before they verify the signature.

Hope it helps.

I need to load the .cer in certain scenarios to do the verification only. In those cases, an access to the private key or the PKCS#12 file won't be possible. Any way to do it, or a workaround? Thats the last thing I need to accomplish to finish the sign/verification process. Thank you very much.

locked

Re: RSA sign with MD5 encryption

by Jasmine, (7448 days ago) @ Erick Daniel

I need to load the .cer in certain scenarios to do the verification only. In those cases, an access to the private key or the PKCS#12 file won't be possible. Any way to do it, or a workaround? Thats the last thing I need to accomplish to finish the sign/verification process. Thank you very much.

Oh, my mistake! You need just to verify? Yes, you can load CER file using wodCertificate object.

There's some info about this on

http://www.weonlydo.com/Crypt/Help/HowDoI.html

Let me know how it goes.

locked

Re: RSA sign with MD5 encryption

by Erick Daniel @, (7447 days ago) @ Jasmine

Oh, my mistake! You need just to verify? Yes, you can load CER file using wodCertificate object.

Where can I find that object? I have currently installed the wodCrypt pack and there is not a wodCertificate object.

Regards,
Erick

locked

Re: RSA sign with MD5 encryption

by Jasmine, (7447 days ago) @ Erick Daniel

You are correct, wodCertificate isn't shipped with wodCrypt. Please contact me on email and I'll send you a copy. I will also try to write you a sample on how to do this exactly using wodCrypt.

locked

Re: RSA sign with MD5 encryption

by Jasmine, (7447 days ago) @ Jasmine

We made a mistake. wodCert.PublicKey property does not return same data as wodKeys.PublicKey (well, at least not for RSA keys). In order to avoid problems, wodCrypt.SecretKey now (since version 1.2.2) accepts contents of PublicKeyOpenSSH properties - meaning OpenSSH public keys. Even better - these are ASCII (base64) values so you can even keep them in your applications.

So, from now on you can open CER file with wodCertificate (shipped with wodCrypt since this version), and do

wodCrypt.SecretKey = wodCertificate.PublicKeyOpenSSH

and it will work.

Hope I helped!

locked

Congratulations on an excellent product and first rate support!

Sander Pool
Rhapsody Networks

...with a minimum of effort as the DLL interface was written with such simplicity...

Zack Menendez
Mapframe Corporation

...with WOD's excellent support I was able to bypass Winsock and focus on the task at hand...

Sander Pool
Rhapsody Networks

It is very refreshing to find such helpful, knowledgeable and quick responding technical support.

Jason Sears
CompuSource Systems, Inc.

...with WOD's excellent support I was able to bypass Winsock and focus on the task at hand...

Sander Pool
Rhapsody Networks

...what I really like is that wodSSH and wodSFTP components work excellently and are constantly being improved...

Steven Jones
SABIEN project

Thank you so much for your hard work and commitment in producing well thought-out solutions. WeOnlyDo is very committed to customer satisfaction!

Mike McPherson
Nokia Inc.

You have been great as far as offering support is concerned and has been extremely responsive to both support requests and suggestions for product enhancements.

David Keenan
Serengeti Systems Incorporated

May I say how nice it is to work with components so complete and self-explanatory that using them in my application is as instinctive as though I wrote them myself?

Michael Barnett
Full Spectrum Telecommunications

You have been great as far as offering support is concerned and has been extremely responsive to both support requests and suggestions for product enhancements.

David Keenan
Serengeti Systems Incorporated