PHP Requires Chilkat v11.0.0+

Aadhaar Paperless Offline e-kyc

See more XML Digital Signatures Examples

Opens an encrypted .zip containing Aadhaar Paperless Offline e-KYC XML. Gets the XML and validates the digital signature. Then computes the hash for the mobile number and Email ID. Chilkat2 PHP

<?php

use Chilkat2\BinData;
use Chilkat2\Cert;
use Chilkat2\Crypt2;
use Chilkat2\PublicKey;
use Chilkat2\Xml;
use Chilkat2\XmlDSig;
use Chilkat2\Zip;
use Chilkat2\ZipEntry;

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

// Open the .zip containing the Aadhaar Paperless Offline e-KYC XML.
// The .zip is encrypted using the "Share Phrase".
$zip = new Zip();
try {
    $zip->OpenZip('qa_data/xml_dsig/offline_paperless_kyc.zip');

    // The .zip should contain 1 XML file.
    $entry = new ZipEntry();
    $zip->EntryAt(0, $entry);

    // To get the contents, we need to specify the Share Phrase.
    $sharePhrase = 'Lock@487';
    $zip->DecryptPassword = $sharePhrase;

    $bdXml = new BinData();
    // The XML file will be unzipped into the bdXml object.
    $entry->UnzipToBd($bdXml);

    // First verify the XML digital signature.
    $dsig = new XmlDSig();
    $dsig->LoadSignatureBd($bdXml);

    // The UIDAI XML signature does not contain the KeyInfo, so we must load the uidai certificate
    // and indicate that its public key is to be used for verifying the signature.
    $cert = new Cert();
    $cert->LoadFromFile('qa_data/xml_dsig/uidai_auth_sign_prod_2023.cer');
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    exit;
}

// Get the certificate's public key.
$pubKey = new PublicKey();
$cert->GetPublicKey($pubKey);

$dsig->SetPublicKey($pubKey);

// The XML in this example contains only 1 signature.
$bVerifyReferenceDigests = true;
try {
    $dsig->VerifySignature($bVerifyReferenceDigests);
} catch (\Chilkat2\Exception $e) {
    echo $e->getMessage(), "\n";
    echo "The signature was not valid.\n";
    exit;
}

echo "The XML digital signature is valid.\n";

// Let's compute the hash for the Mobile Number.

//     Hashing logic for Mobile Number :
//     Sha256(Sha256(Mobile+SharePhrase))*number of times last digit of Aadhaar number
//     (Ref ID field contains last 4 digits).
//
//     Example :
//     Mobile: 1234567890
//     Aadhaar Number:XXXX XXXX 3632
//     Passcode : Lock@487
//     Hash: Sha256(Sha256(1234567890Lock@487))*2
//     In case of Aadhaar number ends with Zero we will hashed one time.

$crypt = new Crypt2();
$crypt->HashAlgorithm = 'sha256';
$crypt->EncodingMode = 'hexlower';

$strToHash = '1234567890Lock@487';
$bdHash = new BinData();
$bdHash->AppendString($strToHash, 'utf-8');

// Hash a number of times equal to the last digit of your Aadhaar number.
// If the Aadhaar number ends with 0, then hash one time.
// For this example, we'll just set the number of times to hash
// for the case where an Aadhaar number ends in "9"
$numTimesToHash = 9;
for ($i = 1; $i <= $numTimesToHash; $i++) {
    $tmpStr = $crypt->HashBdENC($bdHash);
    $bdHash->Clear();
    $bdHash->AppendString($tmpStr, 'utf-8');
}

echo 'Computed Mobile hash = ', $bdHash->GetString('utf-8'), "\n";

// Let's get the mobile hash stored in the XML and compare it with our computed hash.
$xml = new Xml();
$xml->LoadBd($bdXml, true);
$m_hash = $xml->ChilkatPath('UidData|Poi|(m)');

echo 'Stored Mobile hash   = ', $m_hash, "\n";

// Now do the same thing for the email hash:

$strToHash = 'abc@gm.comLock@487';
$bdHash->Clear();
$bdHash->AppendString($strToHash, 'utf-8');

for ($i = 1; $i <= $numTimesToHash; $i++) {
    $tmpStr = $crypt->HashBdENC($bdHash);
    $bdHash->Clear();
    $bdHash->AppendString($tmpStr, 'utf-8');
}

echo 'Computed Email hash = ', $bdHash->GetString('utf-8'), "\n";

$e_hash = $xml->ChilkatPath('UidData|Poi|(e)');
echo 'Stored Email hash   = ', $e_hash, "\n";