Re: Share and store RSA - public key in java server and vice versa
Re: Share and store RSA - public key in java server and vice versa
- Subject: Re: Share and store RSA - public key in java server and vice versa
- From: ChanMaxthon <email@hidden>
- Date: Tue, 13 May 2014 20:02:24 +0800
There are many good container formats for asymmetric keys and public keys can be handled in plain.
Good formats to use: Certificate Signing Request, self-signed certificate, PGP, some form of archive formats can also be used like tar(1) or ar(1).
You can also integrate this key exchange into public PGP key server system so that users can import keys generated elsewhere.
My personal suggestion is CSR. You operate a CA your app trusts and user submit keys as CSR. After you added the key to your server's keychain (you need to implement that yourself) you return a signed certificate to the client.
Sent from my iPhone
> On May 13, 2014, at 6:24 PM, Devarshi Kulshreshtha <email@hidden> wrote:
>
> My requirements are:
>
> Requirement 1: Share public key to java server.
>
> Steps:
>
> 1. Generate public-private keys in iOS app.
> 2. Store the generated keys in keychain.
> 3. Send generated public key to java server.
> 4. Java server shall be able to store shared public key in database.
>
> Requirement 2: Store public key sent by java server.
>
> Steps:
>
> 1. Java server sends public key of other user.
> 2. Process data sent by java server and generate public key from it.
> 3. Store generated key in keychain, which can be later retrieved for
> encrypting message to be transferred.
>
> I am able to achieve steps 1-2 in requirement 1 by using below method
> defined in SecKeyWrapper class (CommonCrypto sample):
>
>
> - (void)generateKeyPair:(NSUInteger)keySize
>
>
> Question 1: Now problem is- how shall I send that key to java server?
>
> We have getPublicKeyBits method in the same class, which returns an
> NSData object, on some googling I found that it is in DER encoded
> format.
>
> Question 2: If I send the same NSData object to server, which I guess
> it will interpret as ByteBuffer object, will it be possible for other
> devices, in my case it could be android, to interpret that data?
>
> Question 3: What is the best way to share public key in above scenarios?
>
> Please suggest.
> _______________________________________________
>
> Cocoa-dev mailing list (email@hidden)
>
> Please do not post admin requests or moderator comments to the list.
> Contact the moderators at cocoa-dev-admins(at)lists.apple.com
>
> Help/Unsubscribe/Update your Subscription:
>
> This email sent to email@hidden
_______________________________________________
Cocoa-dev mailing list (email@hidden)
Please do not post admin requests or moderator comments to the list.
Contact the moderators at cocoa-dev-admins(at)lists.apple.com
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden