(Objective-C) RSA Sign with PKCS8 Encrypted Key

Demonstrates how to load a private key from an encrypted PKCS8 file and create an RSA digital signature (and then verify it).

Chilkat Objective-C Library Downloads MAC OS X (Cocoa) Libs iOS Libs

#import <CkoPrivateKey.h>
#import <NSString.h>
#import <CkoRsa.h>
#import <CkoCert.h>
#import <CkoPublicKey.h>

// This example assumes the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

CkoPrivateKey *pkey = [[CkoPrivateKey alloc] init];

// Load the private key from an RSA PEM file:
BOOL success = [pkey LoadPkcs8EncryptedFile: @"raul_privateKey.key" password: @"a0123456789"];

NSString *pkeyXml = 0;
// Get the private key in XML format:
pkeyXml = [pkey GetXml];

CkoRsa *rsa = [[CkoRsa alloc] init];

// Import the private key into the RSA component:
success = [rsa ImportPrivateKey: pkeyXml];
if (success != YES) {
    NSLog(@"%@",rsa.LastErrorText);
    return;
}

// This example will sign a string, and receive the signature
// in a hex-encoded string.  Therefore, set the encoding mode
// to "hex":
rsa.EncodingMode = @"hex";

NSString *strData = @"This is the string to be signed.";

// Sign the string using the sha-1 hash algorithm.
// Other valid choices are "md2" and "md5".
NSString *hexSig = [rsa SignStringENC: strData hashAlg: @"sha-1"];

NSLog(@"%@",hexSig);

// Now verify with the public key.
// This example shows how to use the public key from 
// a digital certificate (.cer file)
CkoCert *cert = [[CkoCert alloc] init];
success = [cert LoadFromFile: @"raul_publicKey.cer"];
if (success != YES) {
    NSLog(@"%@",cert.LastErrorText);
    return;
}

CkoPublicKey *pubKey = 0;
pubKey = [cert ExportPublicKey];

NSString *pubKeyXml = 0;
// Get the private key in XML format:
pubKeyXml = [pubKey GetXml];

CkoRsa *rsa2 = [[CkoRsa alloc] init];
success = [rsa2 ImportPublicKey: pubKeyXml];
if (success != YES) {
    NSLog(@"%@",rsa2.LastErrorText);
    return;
}

// Verify the signature against the original data:
rsa2.EncodingMode = @"hex";
success = [rsa2 VerifyStringENC: strData hashAlg: @"sha-1" sig: hexSig];
if (success != YES) {
    NSLog(@"%@",rsa2.LastErrorText);
    return;
}

NSLog(@"%@",@"Signature verified!");

// Verify with incorrect data:
success = [rsa2 VerifyStringENC: @"something else" hashAlg: @"sha-1" sig: hexSig];
if (success != YES) {
    NSLog(@"%@",@"Signature not verified! (which was expected in this case)");
}
else {
    NSLog(@"%@",@"Hmmm... that's not right...");
}