pushing mock passport data found in spain with sha1 hashing mrz and sha2 afterwards

common/scripts/passportData/sha256_sha1mrz_rsa_65537.ts

@@ -0,0 +1,106 @@
+import assert from "assert";
+import { PassportData } from "../../src/utils/types";
+import { hash, assembleEContent, formatAndConcatenateDataHashes, formatMrz, hexToDecimal, arraysAreEqual, findSubarrayIndex } from "../../src/utils/utils";
+import * as forge from 'node-forge';
+import { writeFileSync, readFileSync } from "fs";
+import { mock_dsc_key_sha256_rsa_4096 } from "../../src/constants/mockCertificates";
+
+const sampleMRZ = "P<FRADUPONT<<ALPHONSE<HUGUES<ALBERT<<<<<<<<<24HB818324FRA0402111M3111115<<<<<<<<<<<<<<02"
+const sampleDataHashes = [
+  [
+    2,
+    [-66, 82, -76, -21, -34, 33, 79, 50, -104, -120, -114, 35, 116, -32, 6, -14, -100, -115, -128, -8, 10, 61, 98, 86, -8, 45, -49, -46, 90, -24, -81, 38]
+  ],
+  [
+    3,
+    [0, -62, 104, 108, -19, -10, 97, -26, 116, -58, 69, 110, 26, 87, 17, 89, 110, -57, 108, -6, 36, 21, 39, 87, 110, 102, -6, -43, -82, -125, -85, -82]
+  ],
+  [
+    11,
+    [-120, -101, 87, -112, 111, 15, -104, 127, 85, 25, -102, 81, 20, 58, 51, 75, -63, 116, -22, 0, 60, 30, 29, 30, -73, -115, 72, -9, -1, -53, 100, 124]
+  ],
+  [
+    12,
+    [41, -22, 106, 78, 31, 11, 114, -119, -19, 17, 92, 71, -122, 47, 62, 78, -67, -23, -55, -42, 53, 4, 47, -67, -55, -123, 6, 121, 34, -125, 64, -114]
+  ],
+  [
+    13,
+    [91, -34, -46, -63, 62, -34, 104, 82, 36, 41, -118, -3, 70, 15, -108, -48, -100, 45, 105, -85, -15, -61, -71, 43, -39, -94, -110, -55, -34, 89, -18, 38]
+  ],
+  [
+    14,
+    [76, 123, -40, 13, 51, -29, 72, -11, 59, -63, -18, -90, 103, 49, 23, -92, -85, -68, -62, -59, -100, -69, -7, 28, -58, 95, 69, 15, -74, 56, 54, 38]
+  ]
+] as [number, number[]][]
+const signatureAlgorithm = 'sha256WithRSAEncryption'
+const hashLen = 32
+
+export function genMockPassportData_sha256WithRSAEncryption_sha1MRZ_65537(): PassportData {
+  const mrzHash = hash("sha1WithRSAEncryption", formatMrz(sampleMRZ));
+  const concatenatedDataHashes = formatAndConcatenateDataHashes(
+    [[1, mrzHash], ...sampleDataHashes],
+    hashLen,
+    25
+  );
+
+  const eContent = assembleEContent(hash(signatureAlgorithm, concatenatedDataHashes));
+
+  const privKey = forge.pki.privateKeyFromPem(mock_dsc_key_sha256_rsa_4096);
+  const modulus = privKey.n.toString(16);
+
+  const md = forge.md.sha256.create();
+  md.update(forge.util.binary.raw.encode(new Uint8Array(eContent)));
+
+  const signature = privKey.sign(md)
+  const signatureBytes = Array.from(signature, (c: string) => c.charCodeAt(0));
+
+  return {
+    mrz: sampleMRZ,
+    signatureAlgorithm: signatureAlgorithm,
+    pubKey: {
+      modulus: hexToDecimal(modulus),
+      exponent: '65537',
+    },
+    dataGroupHashes: concatenatedDataHashes,
+    eContent: eContent,
+    encryptedDigest: signatureBytes,
+    photoBase64: "iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAYAAAAf8/9hAAABjElEQVR42mL8//8/AyUYiBQYmIw3..."
+  }
+}
+
+function verify(passportData: PassportData): boolean {
+  const { mrz, signatureAlgorithm, pubKey, dataGroupHashes, eContent, encryptedDigest } = passportData;
+  const formattedMrz = formatMrz(mrz);
+  const mrzHash = hash("sha1WithRSAEncryption", formattedMrz);
+  const dg1HashOffset = findSubarrayIndex(dataGroupHashes, mrzHash)
+  console.log('dg1HashOffset', dg1HashOffset);
+  assert(dg1HashOffset !== -1, 'MRZ hash index not found in dataGroupHashes');
+
+  const concatHash = hash(signatureAlgorithm, dataGroupHashes)
+  assert(
+    arraysAreEqual(
+      concatHash,
+      eContent.slice(eContent.length - hashLen)
+    ),
+    'concatHash is not at the right place in eContent'
+  );
+
+  const modulus = new forge.jsbn.BigInteger(pubKey.modulus, 10);
+  const exponent = new forge.jsbn.BigInteger(pubKey.exponent, 10);
+  const rsaPublicKey = forge.pki.rsa.setPublicKey(modulus, exponent);
+
+  const md = forge.md.sha256.create();
+  md.update(forge.util.binary.raw.encode(new Uint8Array(eContent)));
+
+  const signature = Buffer.from(encryptedDigest).toString(
+    'binary',
+  );
+
+  return rsaPublicKey.verify(md.digest().bytes(), signature);
+}
+
+const mockPassportData = genMockPassportData_sha256WithRSAEncryption_sha1MRZ_65537();
+console.log("Passport Data:", JSON.stringify(mockPassportData, null, 2));
+console.log("Signature valid:", verify(mockPassportData));
+
+writeFileSync(__dirname + '/passportData.json', JSON.stringify(mockPassportData, null, 2));