React Native Requires Chilkat v11.0.0+

Aadhaar Paperless Offline e-kyc

See more XML Digital Signatures Examples

Opens an encrypted .zip containing Aadhaar Paperless Offline e-KYC XML. Gets the XML and validates the digital signature. Then computes the hash for the mobile number and Email ID. React Native

import { BinData, Cert, Crypt2, PublicKey, Xml, XmlDSig, Zip, ZipEntry } from '@chilkat/react-native'

async function chilkatExample() {
  // This example requires the Chilkat API to have been previously unlocked.
  // See Global Unlock Sample for sample code.

  // Open the .zip containing the Aadhaar Paperless Offline e-KYC XML.
  // The .zip is encrypted using the "Share Phrase".
  const zip = new Zip();
  try {
    await zip.openZipAsync('qa_data/xml_dsig/offline_paperless_kyc.zip');
  } catch {
    console.log(zip.lastErrorText);
    return;
  }

  // The .zip should contain 1 XML file.
  const entry = new ZipEntry();
  try {
    zip.entryAt(0, entry);
  } catch {
    console.log(zip.lastErrorText);
    return;
  }

  // To get the contents, we need to specify the Share Phrase.
  const sharePhrase = 'Lock@487';
  zip.decryptPassword = sharePhrase;

  const bdXml = new BinData();
  // The XML file will be unzipped into the bdXml object.
  try {
    await entry.unzipToBdAsync(bdXml);
  } catch {
    console.log(entry.lastErrorText);
    return;
  }

  // First verify the XML digital signature.
  const dsig = new XmlDSig();
  try {
    dsig.loadSignatureBd(bdXml);
  } catch {
    console.log(dsig.lastErrorText);
    return;
  }

  // The UIDAI XML signature does not contain the KeyInfo, so we must load the uidai certificate
  // and indicate that its public key is to be used for verifying the signature.
  const cert = new Cert();
  try {
    cert.loadFromFile('qa_data/xml_dsig/uidai_auth_sign_prod_2023.cer');
  } catch {
    console.log(cert.lastErrorText);
    return;
  }

  // Get the certificate's public key.
  const pubKey = new PublicKey();
  cert.getPublicKey(pubKey);

  dsig.setPublicKey(pubKey);

  // The XML in this example contains only 1 signature.
  const bVerifyReferenceDigests = true;
  try {
    dsig.verifySignature(bVerifyReferenceDigests);
  } catch {
    console.log(dsig.lastErrorText);
    console.log('The signature was not valid.');
    return;
  }

  console.log('The XML digital signature is valid.');

  // Let's compute the hash for the Mobile Number.

  // 	Hashing logic for Mobile Number :
  // 	Sha256(Sha256(Mobile+SharePhrase))*number of times last digit of Aadhaar number
  // 	(Ref ID field contains last 4 digits).
  // 
  // 	Example :
  // 	Mobile: 1234567890
  // 	Aadhaar Number:XXXX XXXX 3632
  // 	Passcode : Lock@487
  // 	Hash: Sha256(Sha256(1234567890Lock@487))*2
  // 	In case of Aadhaar number ends with Zero we will hashed one time.

  const crypt = new Crypt2();
  crypt.hashAlgorithm = 'sha256';
  crypt.encodingMode = 'hexlower';

  let strToHash = '1234567890Lock@487';
  const bdHash = new BinData();
  bdHash.appendString(strToHash, 'utf-8');

  // Hash a number of times equal to the last digit of your Aadhaar number.
  // If the Aadhaar number ends with 0, then hash one time.
  // For this example, we'll just set the number of times to hash
  // for the case where an Aadhaar number ends in "9"
  const numTimesToHash = 9;
  for (let i = 1; i <= numTimesToHash; i++) {
    const tmpStr = crypt.hashBdENC(bdHash);
    bdHash.clear();
    bdHash.appendString(tmpStr, 'utf-8');
  }

  console.log(`Computed Mobile hash = ${bdHash.getString('utf-8')}`);

  // Let's get the mobile hash stored in the XML and compare it with our computed hash.
  const xml = new Xml();
  xml.loadBd(bdXml, true);
  const mHash = xml.chilkatPath('UidData|Poi|(m)');

  console.log(`Stored Mobile hash   = ${mHash}`);

  // Now do the same thing for the email hash:

  strToHash = 'abc@gm.comLock@487';
  bdHash.clear();
  bdHash.appendString(strToHash, 'utf-8');

  for (let i = 1; i <= numTimesToHash; i++) {
    const tmpStr = crypt.hashBdENC(bdHash);
    bdHash.clear();
    bdHash.appendString(tmpStr, 'utf-8');
  }

  console.log(`Computed Email hash = ${bdHash.getString('utf-8')}`);

  const eHash = xml.chilkatPath('UidData|Poi|(e)');
  console.log(`Stored Email hash   = ${eHash}`);
}