Signature verification

[gontajones]

If you need to read the public key from string, you have to remove line 13.
And at line 14 put the string.

[saisankalpj]

Hummm...my bad about saying that you were mentioning a private key, sorry.

This is a RSA public key? It should be.
Try with:
-----BEGIN RSA PUBLIC KEY----- ... -----END RSA PUBLIC KEY-----

Ok will check tomorrow and tell u ? Any other suggestion from you?

This is also not working .After adding -----BEGIN RSA PUBLIC KEY----- ... -----END RSA PUBLIC KEY----- also i am getting False

[gontajones]

1 - Are you passing the params of verify_sign() as string?
2 - If so, did you change lines 13 and 14?
3 - Another thing is the base64 encoding, have you encoded the signature and data?

Please, answer every question for us to keep helping you.

[saisankalpj]

1 - Are you passing the params of verify_sign() as string?
2 - If so, did you change lines 13 and 14?
3 - Another thing is the base64 encoding, have you encoded the signature and data?

Please, answer every question for us to keep helping you.

1-yes i am passing it as string
2-pub_key = "-----BEGIN RSA PUBLIC KEY-----\n" + public_key_loc + "\n-----END RSA PUBLIC KEY-----".i have changed the lines like these
3-i was doing base64decode.i have checked even with base64 encode
all seem to return false

[gontajones]

Here is working well.
Try these parameters:
- pub_key: string
- signature: string
- data: string

def verify_sign(public_key_string, signature, data):
    from Crypto.PublicKey import RSA
    from Crypto.Signature import PKCS1_v1_5
    from Crypto.Hash import SHA256
    rsakey = RSA.importKey(public_key_string)
    signer = PKCS1_v1_5.new(rsakey)
    digest = SHA256.new()
    digest.update(data)
    if signer.verify(digest, signature):
        return True
    return False

and obviously your key must be generated using RSA.

[saisankalpj]

Here is working well.
Try to this, it uses:
- pub_key: string
- signature: string
- data: string

def verify_sign(public_key_string, signature, data):
    from Crypto.PublicKey import RSA
    from Crypto.Signature import PKCS1_v1_5
    from Crypto.Hash import SHA256
    rsakey = RSA.importKey(public_key_string)
    signer = PKCS1_v1_5.new(rsakey)
    digest = SHA256.new()
    digest.update(data)
    if signer.verify(digest, signature):
        return True
    return False

and obviously your key must be generated using RSA.

Can i use SHA512.new() instead of SHA256.new()

[gontajones]

I really don't know that. =/
Did you try it?
It keeps returning False?

[saisankalpj]

I really don't know that. =/
Did you try it?
It keeps returning False?

Yes it keeps returning false

[gontajones]

So I think your best shot will be sharing all these info (pub, sign, data).
Then we'll be able to test and see what's really going on.
If they are not "private", off course.

[saisankalpj]

So I think your best shot will be sharing all these info (pub, sign, data).
Then we'll be able to test and see what's really going on.
If they are not "private", off course.

I cant share it is confidential