Tencent / soter

A secure and quick biometric authentication standard and platform in Android held by Tencent.
Other
1.92k stars 204 forks source link

证书链模式下Auth Key校验失败 #99

Open Don-Lee opened 2 years ago

Don-Lee commented 2 years ago

华为手机上ASK 为证书链格式,当使用证书中解析出的ASK 公钥验证Auth Key时一直返回false(使用的Demo代码进行的验签操作,非证书链格式可以通常通过)。试了几个华为手机都这样,请问是什么原因?

ASK: {"certs":["-----BEGIN CERTIFICATE-----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\n9ym3LD+DlYw=\n-----END CERTIFICATE-----\n","-----BEGIN CERTIFICATE-----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\n2n83z2Fs6EwpDteMLIIL2f8bHir+j59P9Xy3HK1hrQGCU4bV\n-----END CERTIFICATE-----\n","-----BEGIN CERTIFICATE-----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\n0uVSOEYODEFGUT6oeTs6DvM+96q7tKi\/Jt8=\n-----END CERTIFICATE-----\n","-----BEGIN CERTIFICATE-----\nMIIFZDCCA0ygAwIBAgIIYsLLTehAXpYwDQYJKoZIhvcNAQELBQAwUDELMAkGA1UE\nBhMCQ04xDzANBgNVBAoMBkh1YXdlaTETMBEGA1UECwwKSHVhd2VpIENCRzEbMBkG\nA1UEAwwSSHVhd2VpIENCRyBSb290IENBMB4XDTE3MDgyMTEwNTYyN1oXDTQyMDgx\nNTEwNTYyN1owUDELMAkGA1UEBhMCQ04xDzANBgNVBAoMBkh1YXdlaTETMBEGA1UE\nCwwKSHVhd2VpIENCRzEbMBkGA1UEAwwSSHVhd2VpIENCRyBSb290IENBMIICIjAN\nBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA1OyKm3Ig\/6eibB7Uz2o93UqGk2M7\n84WdfF8mvffvu218d61G5M3Px54E3kefUTk5Ky1ywHvw7Rp9KDuYv7ktaHkk+yr5\n9Ihseu3a7iM\/C6SnMSGt+LfB\/Bcob9Abw95EigXQ4yQddX9hbNrin3AwZw8wMjEI\nSYYDo5GuYDL0NbAiYg2Y5GpfYIqRzoi6GqDz+evLrsl20kJeCEPgJZN4Jg00Iq9k\n++EKOZ5Jc\/Zx22ZUgKpdwKABkvzshEgG6WWUPB+gosOiLv++inu\/9blDpEzQZhjZ\n9WVHpURHDK1YlCvubVAMhDpnbqNHZ0AxlPletdoyugrH\/OLKl5inhMXNj3Re7Hl8\nWsBWLUKp6sXFf0dvSFzqnr2jkhicS+K2IYZnjghC9cOBRO8fnkonh0EBt0evjUIK\nr5ClbCKioBX8JU+d4ldtWOpp2FlxeFTLreDJ5ZBU4\/\/bQpTwYMt7gwMK+MO5Wtok\nUx3UF98Z6GdUgbl6nBjBe82c7oIQXhHGHPnURQO7DDPgyVnNOnTPIkmiHJh\/e3vk\nVhiZNHFCCLTip6GoJVrLxwb9i4q+d0thw4doxVJ5NB9OfDMV64\/ybJgpf7m3Ld2y\nE0gsf1prrRlDFDXjlYyqqpf1l9Y0u3ctXo7UpXMgbyDEpUQhq3a7txZQO\/17luTD\noA6Tz1ADavvBwHkCAwEAAaNCMEAwDgYDVR0PAQH\/BAQDAgEGMA8GA1UdEwEB\/wQF\nMAMBAf8wHQYDVR0OBBYEFKrE03lH6G4ja+\/wqWwicz16GWmhMA0GCSqGSIb3DQEB\nCwUAA4ICAQC1d3TMB+VHZdGrWJbfaBShFNiCTN\/MceSHOpzBn6JumQP4N7mxCOwd\nRSsGKQxV2NPH7LTXWNhUvUw5Sek96FWx\/+Oa7jsj3WNAVtmS3zKpCQ5iGb08WIRO\ncFnx3oUQ5rcO8r\/lUk7Q2cN0E+rF4xsdQrH9k2cd3kAXZXBjfxfKPJTdPy1XnZR\/\nh8H5EwEK5DWjSzK1wKd3G\/Fxdm3E23pcr4FZgdYdOlFSiqW2TJ3Qe6lF4GOKOOyd\nWHkpu54ieTsqoYcuMKnKMjT2SLNNgv9Gu5ipaG8Olz6g9C7Htp943lmK\/1Vtnhgg\npL3rDTsFX\/+ehk7OtxuNzRMD9lXUtEfok7f8XB0dcL4ZjnEhDmp5QZqC1kMubHQt\nQnTauEiv0YkSGOwJAUZpK1PIff5GgxXYfaHfBC6Op4q02ppl5Q3URl7XIjYLjvs9\nt4S9xPe8tb6416V2fe1dZ62vOXMMKHkZjVihh+IceYpJYHuyfKoYJyahLOQXZykG\nK5iPAEEtq3HPfMVF43RKHOwfhrAH5KwelUA\/0EkcR4Gzth1MKEqojdnYNemkkSy7\naNPPT4LEm5R7sV6vG1CjwbgvQrWCgc4nMb8ngdfnVF7Ydqjqi9SAqUzIk4+Uf0ZY\n+6RY5IcHdCaiPaWIE1xURQ8B0DRUURsQwXdjZhgLN\/DKJpCl5aCCxg==\n-----END CERTIFICATE-----\n"],"cpu_id":"HUAWEI_HWLYA_c790e04d-b0f9-4657-b78f-e6ef1a9f4ac0-9a374197","uid":10919,"counter":80}

Auth Key json串: {"pub_key":"-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/PoEihP2LNQOLWbbl2wHQnKFGKRc03jBD9+6ZjYwcV0cYgnIbTPLC+FfKD7TkOh74EKtwDdhpuZpNihWm59/If8NzgxOAJF/iaOJZYmXnKpgmAnyibxm1P6FvflC5lhQID0bRDe8fqnHzryKyGlG5hAd8cxgplgeUyn9JQREcmdXocn6HjwpklEY0HeNQc7p8g8nCu2cOGKBPKV4LSC0BwrlEJWAPqN95OeLTNCvoFDScGgpxRO/9gwV+RCVhytLQtFRNV4gS3ZiuMQ16L2F0qc1n3QU8pdNGUyie7eI87dc8Oj3AirnLMj412FJhqy7WDfTF71+hBl4Qle1wp+ewIDAQAB -----END PUBLIC KEY-----","cpu_id":"HUAWEI_HWLYA_c790e04d-b0f9-4657-b78f-e6ef1a9f4ac0-9a374197","counter":81,"uid":"10919","rsa_pss_saltlen":32}

Auth key签名: lNj896Plrn/+g4cRr2NEBPNcKLOSOU7FjeR8hOepOOsZ68hvPlKyTYIRsxhnra3yEg9yq9PI4o6tyzoCiP86FA1Ym/VMXRkYWifntWQO7lREtitRfjH18HhH7tu0Bp6i3vKBITECsyUAhRBh8INTRN0Vy2tyUQdaYq9akPzJzejQPBgEYkSJo5dq9T6WhITkq6nTRFZTxsxRAMTTsMlBLBT2yOL2u/hMn8XWDbfP3yN5zjfKhRFe+l5pOIQUdK22CUEwAHmIpycmg1ksld1KC/dF9Js9i8uhmasCROHTOh9maQztgzWRl1uHGqxQVlczMGbARnZPnpxGbISFw76n6A==

inkzuji commented 8 months ago

请问这个问题你这边解决了么

DingYong4223 commented 5 months ago

我这里也遇到同样的问题,官方没有支持么