Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Which APIs are supported for encryption?

...

Encryption Mechanism:

The payload of the supported APIs are encrypted with the following method. We use AES-512 & RSA for encryption of payload.

...

  1. Download the Public Key (public_key.pem) file from “Edit Flow” section.

  2. Take the valid JSON payload of the API which needs to be passed. Let’s call it “payload”

  3. Encode the payload using Base64 encoding. Let’s call the result “payload-B64”.

  4. Generate a random string of upto 2048 characters to be used as the signature key

  5. Encode that with Base64 encoding. Let’s call it “signatureKey-B64

  6. Use AES-512/ECB/PKCS5Padding encryption method to encrypt “payload-B64” with “signatureKey-B64”. Let’s call the result “payload-B64-AES”.

  7. Encrypt the encoded signature key with RSA Encryption using the Public Key obtained on step 1. Let’s call it “signatureKey-B64-RSA”.

  8. Send both “payload-B64-AES” and “signatureKey-B64-RSA” as parameters to the encrypted API.

...

Code Block
languagejson
{
  "api-response-code": 200,
  "api-response-message": "Success",
  "request-id": "367a25ec-065b-4ca7-a73f-70d1da818a22",
  "call-details": [
    {
      "client-identifier": "2021-05-17T05:47:30.536Z",
      "phonon-uuid": "6a79da04-cf07-4c42-973f-998ea3380708"
    }
  ]
}

Open Questions: