Encryption and Decryption Logic for ICICI bank Apis

PFB & PFA Kindly start the live testing and let us know incase of any support is required from bank end

 

Headers :-

 

accept: */*, 

content-length: 684,

content-type: text/plain

 

APIKEY: ADGpGADpJjzvsBDrKT07beqVo6IIsOuK

“AGGRID”:”OTOE0832″

“AGGRNAME”:”G10XTECH”

“URN”:”SR256689761

APIs:-

https://apibankingone.icicibank.com/api/Corporate/CIB/v1/AccountStatement

https://apibankingone.icicibank.com/api/Corporate/CIB/v1/BalanceInquiry

 

Encryption & Decryption:-

AES-128-CBC

Algorithm Name: RSA

Mode: ECB

Padding: PKCS1Padding

RSA/ECB/PKCS1Padding

Encryption Logic:-

1. Asymmetric Encryption(RSA_Encrypt) with RSA 4096 bit ICICI Public Certificate, with mode/padding as ECB/PKCS1,

2. Base64Encode.

Decryption Logic:-

1. Base64Decode,

2. Asymmetric Decryption(RSA_Decrypt) by using client private Key.

Decryption Logic for account statement:-

step 1: Decrypting the encrypted key using client private key.

step 2: Base 64 decode encrypted data,

step 3: Retrieving iv from step 2(first 16 characters)

step 4: Doing symmetric key decryption on encrypted data, by using key from step 1 and iv from step 3

SessionKey = RSA/ECB/PKCS1Decryption(Base64Decode(encryptedKey),B2C.cer)

Data = AES/CBC/PKCS5Padding((Base64Decode(encryptedData),SessionKey

Leave a comment

Your email address will not be published. Required fields are marked *