(Classic ASP) Aadhaar Paperless Offline e-kyc

Opens an encrypted .zip containing Aadhaar Paperless Offline e-KYC XML. Gets the XML and validates the digital signature. Then computes the hash for the mobile number and Email ID.

For more information, see https://uidai.gov.in/ecosystem/authentication-devices-documents/about-aadhaar-paperless-offline-e-kyc.html

Chilkat ActiveX Downloads

ActiveX for 32-bit and 64-bit Windows

<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<%
' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' Open the .zip containing the Aadhaar Paperless Offline e-KYC XML.
' The .zip is encrypted using the "Share Phrase".
set zip = Server.CreateObject("Chilkat_9_5_0.Zip")
success = zip.OpenZip("qa_data/xml_dsig/offline_paperless_kyc.zip")
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( zip.LastErrorText) & "</pre>"
    Response.End
End If

' The .zip should contain 1 XML file.
' entry is a Chilkat_9_5_0.ZipEntry
Set entry = zip.GetEntryByIndex(0)
If (zip.LastMethodSuccess = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( zip.LastErrorText) & "</pre>"
    Response.End
End If

' To get the contents, we need to specify the Share Phrase.
sharePhrase = "Lock@487"
zip.DecryptPassword = sharePhrase

set bdXml = Server.CreateObject("Chilkat_9_5_0.BinData")
' The XML file will be unzipped into the bdXml object.
success = entry.UnzipToBd(bdXml)
If (success = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( entry.LastErrorText) & "</pre>"

    Response.End
End If

' First verify the XML digital signature.
set dsig = Server.CreateObject("Chilkat_9_5_0.XmlDSig")
success = dsig.LoadSignatureBd(bdXml)
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( dsig.LastErrorText) & "</pre>"
    Response.End
End If

' The UIDAI XML signature does not contain the KeyInfo, so we must load the uidai certificate
' and indicate that its public key is to be used for verifying the signature.
set cert = Server.CreateObject("Chilkat_9_5_0.Cert")
success = cert.LoadFromFile("qa_data/xml_dsig/uidai_auth_sign_prod_2023.cer")
If (success <> 1) Then
    Response.Write "<pre>" & Server.HTMLEncode( cert.LastErrorText) & "</pre>"
    Response.End
End If

' Get the certificate's public key.
' pubKey is a Chilkat_9_5_0.PublicKey
Set pubKey = cert.ExportPublicKey()
success = dsig.SetPublicKey(pubKey)

' The XML in this example contains only 1 signature.
bVerifyReferenceDigests = 1
bVerified = dsig.VerifySignature(bVerifyReferenceDigests)
If (bVerified = 0) Then
    Response.Write "<pre>" & Server.HTMLEncode( dsig.LastErrorText) & "</pre>"
    Response.Write "<pre>" & Server.HTMLEncode( "The signature was not valid.") & "</pre>"
    Response.End
End If

Response.Write "<pre>" & Server.HTMLEncode( "The XML digital signature is valid.") & "</pre>"

' Let's compute the hash for the Mobile Number.

' 	Hashing logic for Mobile Number :
' 	Sha256(Sha256(Mobile+SharePhrase))*number of times last digit of Aadhaar number
' 	(Ref ID field contains last 4 digits).
' 
' 	Example :
' 	Mobile: 1234567890
' 	Aadhaar Number:XXXX XXXX 3632
' 	Passcode : Lock@487
' 	Hash: Sha256(Sha256(1234567890Lock@487))*2
' 	In case of Aadhaar number ends with Zero we will hashed one time.

set crypt = Server.CreateObject("Chilkat_9_5_0.Crypt2")
crypt.HashAlgorithm = "sha256"
crypt.EncodingMode = "hexlower"

strToHash = "1234567890Lock@487"
set bdHash = Server.CreateObject("Chilkat_9_5_0.BinData")
success = bdHash.AppendString(strToHash,"utf-8")

' Hash a number of times equal to the last digit of your Aadhaar number.
' If the Aadhaar number ends with 0, then hash one time.
' For this example, we'll just set the number of times to hash
' for the case where an Aadhaar number ends in "9"
numTimesToHash = 9

For i = 1 To numTimesToHash
    tmpStr = crypt.HashBdENC(bdHash)
    success = bdHash.Clear()
    success = bdHash.AppendString(tmpStr,"utf-8")
Next

Response.Write "<pre>" & Server.HTMLEncode( "Computed Mobile hash = " & bdHash.GetString("utf-8")) & "</pre>"

' Let's get the mobile hash stored in the XML and compare it with our computed hash.
set xml = Server.CreateObject("Chilkat_9_5_0.Xml")
success = xml.LoadBd(bdXml,1)
m_hash = xml.ChilkatPath("UidData|Poi|(m)")

Response.Write "<pre>" & Server.HTMLEncode( "Stored Mobile hash   = " & m_hash) & "</pre>"

' Now do the same thing for the email hash:

strToHash = "abc@gm.comLock@487"
success = bdHash.Clear()
success = bdHash.AppendString(strToHash,"utf-8")

For i = 1 To numTimesToHash
    tmpStr = crypt.HashBdENC(bdHash)
    success = bdHash.Clear()
    success = bdHash.AppendString(tmpStr,"utf-8")
Next

Response.Write "<pre>" & Server.HTMLEncode( "Computed Email hash = " & bdHash.GetString("utf-8")) & "</pre>"

e_hash = xml.ChilkatPath("UidData|Poi|(e)")
Response.Write "<pre>" & Server.HTMLEncode( "Stored Email hash   = " & e_hash) & "</pre>"

%>
</body>
</html>