Skip to content

Latest commit

 

History

History
 
 

Encryption

Folders and files

NameName
Last commit message
Last commit date

parent directory

..
 
 
 
 
 
 

Encryption

Encryption facilities that come in handy. These can be used without an additional OpenSSL library, meaning you don't need to add OpenSSL to your app; these facilities rely solely on methods officially exposed by iOS's Security.framework.

Module Interface

IN

  • Data, to be encrypted or decrypted using RSA or AES algorithms.
  • X509 public key certificate file to use for RSA encryption.
  • Data containing symmetric key data for AES en- and decryption.

OUT

  • Data, encrypted using RSA or AES algorithms.
  • Data, decrypted using AES algorithm.

RSAUtility

Can use a (bundled) X509 public key certificate to encrypt a symmetric key that can be used elsewhere (see below). Relies on SecKeyEncrypt, which comes with Security.framework, and is compatible with RSA/ECB/OAEPWithSHA1AndMGF1Padding padding. The main method you'll use is encrypt(data:).

Key pairs can be generated using OpenSSL on your desktop like so:

openssl req -x509 -days 3652 -out public.crt -outform DER -new -newkey rsa:2048 -keyout private.pem

AESUtility

The AES utility can be used for symmetric key encryption and decryption, default key length is 32 bytes. Relies on the CryptoSwift submodule and is compatible with AES/CBC/PKCS5Padding encryption.

You use the encrypt(data:) method to encrypt data with the utilities' key and decrypt(encData:) to decrypt data that was encrypted with the same key.