如何使用OpenPGP.js在Objective-C中加密/解密PGP消息

Question

I want to encrypt a message using a armored key. I want to accomplish this using OpenPGP.js.

Answer 1

I'm answering my own question. I figured this out a while ago and wanted to share, since I couldn't find anything similar.

Here is how encryption should look like:

+ (NSString *)encryptMessage:(NSString *)message
                  forKey:(NSString *)key {
NSString *result = nil;

UIWebView *webView = [[UIWebView alloc] init];

NSString *path = [[NSBundle mainBundle] pathForResource:@"openpgp" ofType:@"js"];
NSString *content = [NSString stringWithContentsOfFile:path encoding:NSUTF8StringEncoding error:nil];
NSString *resultOfPGPLibEval = [webView stringByEvaluatingJavaScriptFromString:content];
if ([resultOfPGPLibEval isEqualToString:@"true"]) {//library was loaded successfully
    JSContext *context =  [webView valueForKeyPath:@"documentView.webView.mainFrame.javaScriptContext"]; // Undocumented access
    context[@"key"] = key;
    context[@"message"] = message;
    [context evaluateScript:@"var openpgp = window.openpgp; var publicKey = openpgp.key.readArmored(key);var pgpMessage = openpgp.encryptMessage(publicKey.keys, message);"];
    JSValue *val2 = context[@"pgpMessage"];
    result = val2.toString;
}

return result;

}

Notice that you must have the OpenPGP library in the bundle, in this example it is named 'openpgp.js'. Also the key in this example is armored, so keep that in mind.

I feel that while wasteful to create a WebView just for one encryption round, it is more secure since it will fall out of scope as soon as the result is returned with it it's context. Keep in mind that I'm not a security guy, so take that with a grain of salt.

I hope this helps someone.

Answer 2

但是，如果您只想在没有javascript桥接的情况下进行加密，则可以尝试使用ObjectivePGP库。