I'm trying to validate WebApp data but the result is not what I wanted. Telegram documentation: data_check_string = ... secret_key = HMAC_SHA256(<bot_token>, "WebAppData") if (hex(HMAC_SHA256(data_check_string, secret_key)) == hash) { // data is from Telegram } MyCode: BOT_TOKEN = '5139539316:AAGVhDje2A3mB9yA_7l8-TV8xikC7KcudNk' data_check_string…
Backend uses this java implementation for encrypting the data using public key(generated from iOS App in swift), Cipher iesCipher = Cipher.getInstance("ECIESwithAES-CBC"); byte[] derivation = Hex.decode(derivationString); byte[] encoding = Hex.decode(encodingString); byte[] nonce = Hex.decode(nonceString); IESParameterSpec params = new IESParameterSpec(derivation, encoding, 128,…
Currently I am working in dev env on my local machine where I am storing passwords in plain text using MongoDB. I am using express-jwt along with jsonwebtoken for passing user data and authentication. I've researched bcryptjs and bcrypt and…
I've found documentation for an insecure ktor websocket server (ws://...): https://ktor.io/docs/creating-web-socket-chat.html#creating-the-chat-client I've found documentation for a secure ktor http server (https://...) https://github.com/ktorio/ktor-documentation/tree/main/codeSnippets/snippets/ssl-embedded-server But I can't seem to find or figure out how to serve a secure ktor websocket server (wss://...)…
The Android docs give the following snippet for how to encrypt a message in AES: val plaintext: ByteArray = ... val keygen = KeyGenerator.getInstance("AES") keygen.init(256) val key: SecretKey = keygen.generateKey() val cipher = Cipher.getInstance("AES/CBC/PKCS5PADDING") cipher.init(Cipher.ENCRYPT_MODE, key) val ciphertext: ByteArray =…
I am trying to convert VB.NET Encrypt/Decrypt to PHP. The issue is we can not update the PHP version and the server supports only PHP5.3 VB.NET Sample Output Link http://www.tattoogenda.com/LoginTest.aspx VB.NET Output is: Ao5ZnFYo344iWqv/Jr9euw== PHP OutPut is: NzmRRxTaXgWFIPx/SqODog== VB.NET Code…
I know there are some other questions (with answers) to this topic. But none of these was helpful for me. I have a Postfix server (postfix 3.4.14 on Debian 10 (Buster)) with the following configuration (only the interesting section): smtpd_tls_mandatory_protocols…
I've created a Laravel application which requests my users access to an external application using oAuth (authorization code). All good, I'm able to connect the external application to my users' accounts. However, the external API gives me an access and…
I was using "mcrypt-*" for decoding the response in previous PHP 5.6 version but now in PHP 7.2 version as it is deprecated I am using openSSL method. But it is not working properly hopefully I am missing something. $value="###lllljG5ZOibDGtlL…
My app uses a login/register system which encrypts password using BCrypt. When a users registers the password is encrypted using BCrypt and then stored in the mysql database. However when a user logins I want the password to be encrypted…