Kusetshenziswa ithokheni yefu esekela i-cryptography yesiRashiya kuplathifomu ye-Android

Ngombono we-PKCS#11, ukusebenzisa ithokheni yefu akufani nokusebenzisa ithokheni yehadiwe. Ukuze usebenzise ithokheni kukhompyutha (futhi sizokhuluma ngeplatifomu ye-Android), kufanele ube nomtapo wolwazi wokusebenza nethokheni kanye nethokheni exhunyiwe ngokwayo. Ngoba ithokheni yefu udinga into efanayo - umtapo wolwazi kanye nokuxhumana nefu. Lokhu kuxhumana kunikezwa ifayela lokumisa elicacisa ikheli lefu lapho amathokheni omsebenzisi agcinwa khona.

Ihlola isimo sethokheni ye-cryptographic

Ngakho-ke, landa inguqulo ebuyekeziwe yohlelo lokusebenza cryptoarmpkcs-A. Faka futhi uqalise uhlelo lokusebenza bese uya kumenyu enkulu. Ukuze uthole umsebenzi owengeziwe, udinga ukukhetha ithokheni okuzosetshenziswa izindlela ze-cryptographic (khumbula ukuthi uma usebenza nayo I-PKCS12 alukho uphawu oludingekayo):

Isithombe-skrini sibonisa ngokucacile ukuthi kwenzekani uma ucindezela inkinobho ethile. Uma uchofoza inkinobho "enye ithokheni", uzocelwa ukuthi ukhethe ilabhulali ye-PKCS#11 yethokheni yakho. Kwezinye izimo ezimbili, ulwazi mayelana nesimo sethokheni ekhethiwe lunikezwa. Indlela yokuxhuma ithokheni yesofthiwe kwaxoxwa ngayo esihlokweni esandulele isihloko. Namuhla sinentshisekelo kuthokheni yefu.

Ukubhaliswa Kwethokheni Yefu

Iya kuthebhu ethi “Ixhuma i-PKCS#11 Amathokheni”, thola into ethi “Dala ithokheni yefu” bese ulanda uhlelo lokusebenza lwe-LS11CloudToken-A.:

Faka uhlelo lokusebenza olulandiwe futhi uluqalise:

Ngemva kokugcwalisa izinkambu kuthebhu ethi "Ukubhalisa efwini" bese uchofoza inkinobho ethi "Bhalisa", inqubo yokubhalisa ithokheni efwini iqala. Inqubo yokubhalisa ibandakanya ukudala imbewu yokuqala ye-random number generator (RNG). Ukwengeza ukungahleliwe "kwebhayoloji" lapho udala inani lokuqala, i-NDSCH iphinda ihlanganise okokufaka kwekhibhodi yomsebenzisi. Lapha, kokubili isivinini sokufaka uhlamvu nokulunga kokokufaka kuyacatshangelwa:

Ngemva kokubhalisa efwini, ungabheka isimo sethokheni efwini:

Ngemva kokubhalisa ngempumelelo efwini, phuma kuhlelo lokusebenza lwe-LS11CloudToken-A, buyela kuhlelo lokusebenza lwe-cryptoarmpkcs-A bese uhlola isimo sethokheni yefu futhi:

Ukuhlola ubukhona bethokheni yefu kuqinisekisile ukuthi sibhalise ngempumelelo efwini futhi sidinga ukuqalisa ithokheni yethu yefu kuyo.

Ukuqaliswa kwethokheni yamafu

Lokhu kuqaliswa akuhlukile ekuqalisweni kwanoma iyiphi enye ithokheni, isibonelo, ithokheni yesofthiwe.

Futhi-ke konke kunjengokuvamile, sibeka isitifiketi somuntu siqu, isibonelo esivela esitsheni I-PKCS12, kuthokheni yefu bese uyisebenzisela ukusayina idokhumenti:

Ungakwazi futhi ukwakha isicelo sesitifiketi (Ithebhu yesicelo sesitifiketi):

Ngesicelo esidaliwe, hamba esikhungweni sokunikeza izitifiketi, uthole isitifiketi lapho bese usingenisa kuthokheni:

Source: www.habr.com