(VBScript) Aadhaar Paperless Offline e-kyc

Opens an encrypted .zip containing Aadhaar Paperless Offline e-KYC XML. Gets the XML and validates the digital signature. Then computes the hash for the mobile number and Email ID.

For more information, see https://uidai.gov.in/ecosystem/authentication-devices-documents/about-aadhaar-paperless-offline-e-kyc.html

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

Dim fso, outFile
Set fso = CreateObject("Scripting.FileSystemObject")
'Create a Unicode (utf-16) output text file.
Set outFile = fso.CreateTextFile("output.txt", True, True)

' This example requires the Chilkat API to have been previously unlocked.
' See Global Unlock Sample for sample code.

' Open the .zip containing the Aadhaar Paperless Offline e-KYC XML.
' The .zip is encrypted using the "Share Phrase".
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Zip")
set zip = CreateObject("Chilkat.Zip")
success = zip.OpenZip("qa_data/xml_dsig/offline_paperless_kyc.zip")
If (success = 0) Then
    outFile.WriteLine(zip.LastErrorText)
    WScript.Quit
End If

' The .zip should contain 1 XML file.
' entry is a Chilkat.ZipEntry
Set entry = zip.GetEntryByIndex(0)
If (zip.LastMethodSuccess = 0) Then
    outFile.WriteLine(zip.LastErrorText)
    WScript.Quit
End If

' To get the contents, we need to specify the Share Phrase.
sharePhrase = "Lock@487"
zip.DecryptPassword = sharePhrase

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.BinData")
set bdXml = CreateObject("Chilkat.BinData")
' The XML file will be unzipped into the bdXml object.
success = entry.UnzipToBd(bdXml)
If (success = 0) Then
    outFile.WriteLine(entry.LastErrorText)

    WScript.Quit
End If

' First verify the XML digital signature.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.XmlDSig")
set dsig = CreateObject("Chilkat.XmlDSig")
success = dsig.LoadSignatureBd(bdXml)
If (success <> 1) Then
    outFile.WriteLine(dsig.LastErrorText)
    WScript.Quit
End If

' The UIDAI XML signature does not contain the KeyInfo, so we must load the uidai certificate
' and indicate that its public key is to be used for verifying the signature.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Cert")
set cert = CreateObject("Chilkat.Cert")
success = cert.LoadFromFile("qa_data/xml_dsig/uidai_auth_sign_prod_2023.cer")
If (success <> 1) Then
    outFile.WriteLine(cert.LastErrorText)
    WScript.Quit
End If

' Get the certificate's public key.
' pubKey is a Chilkat.PublicKey
Set pubKey = cert.ExportPublicKey()
success = dsig.SetPublicKey(pubKey)

' The XML in this example contains only 1 signature.
bVerifyReferenceDigests = 1
bVerified = dsig.VerifySignature(bVerifyReferenceDigests)
If (bVerified = 0) Then
    outFile.WriteLine(dsig.LastErrorText)
    outFile.WriteLine("The signature was not valid.")
    WScript.Quit
End If

outFile.WriteLine("The XML digital signature is valid.")

' Let's compute the hash for the Mobile Number.

' 	Hashing logic for Mobile Number :
' 	Sha256(Sha256(Mobile+SharePhrase))*number of times last digit of Aadhaar number
' 	(Ref ID field contains last 4 digits).
' 
' 	Example :
' 	Mobile: 1234567890
' 	Aadhaar Number:XXXX XXXX 3632
' 	Passcode : Lock@487
' 	Hash: Sha256(Sha256(1234567890Lock@487))*2
' 	In case of Aadhaar number ends with Zero we will hashed one time.

' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Crypt2")
set crypt = CreateObject("Chilkat.Crypt2")
crypt.HashAlgorithm = "sha256"
crypt.EncodingMode = "hexlower"

strToHash = "1234567890Lock@487"
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.BinData")
set bdHash = CreateObject("Chilkat.BinData")
success = bdHash.AppendString(strToHash,"utf-8")

' Hash a number of times equal to the last digit of your Aadhaar number.
' If the Aadhaar number ends with 0, then hash one time.
' For this example, we'll just set the number of times to hash
' for the case where an Aadhaar number ends in "9"
numTimesToHash = 9

For i = 1 To numTimesToHash
    tmpStr = crypt.HashBdENC(bdHash)
    success = bdHash.Clear()
    success = bdHash.AppendString(tmpStr,"utf-8")
Next

outFile.WriteLine("Computed Mobile hash = " & bdHash.GetString("utf-8"))

' Let's get the mobile hash stored in the XML and compare it with our computed hash.
' For versions of Chilkat < 10.0.0, use CreateObject("Chilkat_9_5_0.Xml")
set xml = CreateObject("Chilkat.Xml")
success = xml.LoadBd(bdXml,1)
m_hash = xml.ChilkatPath("UidData|Poi|(m)")

outFile.WriteLine("Stored Mobile hash   = " & m_hash)

' Now do the same thing for the email hash:

strToHash = "abc@gm.comLock@487"
success = bdHash.Clear()
success = bdHash.AppendString(strToHash,"utf-8")

For i = 1 To numTimesToHash
    tmpStr = crypt.HashBdENC(bdHash)
    success = bdHash.Clear()
    success = bdHash.AppendString(tmpStr,"utf-8")
Next

outFile.WriteLine("Computed Email hash = " & bdHash.GetString("utf-8"))

e_hash = xml.ChilkatPath("UidData|Poi|(e)")
outFile.WriteLine("Stored Email hash   = " & e_hash)

outFile.Close