search

Sikerdebaard / coronacheck-tools

Unofficial tool to verify, encode and decode the domestic QR code from CoronaCheck.nl. Not affiliated with CoronaCheck.nl or Ministry of VWS.
MIT License
37 stars 9 forks source link

Understand how the validation tool works. #12

Closed EL-NAGASH closed 2 years ago

EL-NAGASH commented 2 years ago

Greetings, I am trying to develop a tool similar to yours, but in Java. The problem is that I don't understand how you perform the verification process. I have done many tests with your tool and I see that it works correctly (even offline, necessary part for my project), but I do not understand the verification process.... I have been able to verify that if any change is made to any of the variables in the generated json ("disclosureTimeSeconds", "c", "a", "eResponse", "vResponse", "aResponse" or "aDisclosed"), the program detects that it is invalid code, but I don't understand the process it follows to reach that conclusion and I need to replicate it in Java. If you could guide me about the path it follows to perform the checks I would be very grateful.

Regards.

Sikerdebaard commented 2 years ago

This is done through the official mobilecore verifier from the government.

bindings: mobilecore.py init.py

c-shared lib builds: mobilecore

Please note that there's a thin wrapper around these mobilecore builds. This wrapper is located here.

You will need to use some sort of foreign function interface to talk to the c library. I'm not sure how to do that in Java, it's been at least 10 years since I've last used that language.

Sikerdebaard commented 2 years ago

Closing due to inactivity.