Latest 1.2.0
License MIT
Platforms ios 7.0, requires ARC
Frameworks Security

Build Status

  • Ability to do AES CCM encryption (no auth data)
  • Ability to use Modulus and Exponent in RSA encryption
  • Native iOS code without dependancies, no need in OpenSSL


// generate a unique AES key and (later) encrypt it with the public RSA key of the merchant
NSMutableData *key = [NSMutableData dataWithLength:kCCKeySizeAES256];
SecRandomCopyBytes(NULL, kCCKeySizeAES256, key.mutableBytes);

// generate a nonce
NSMutableData *iv = [NSMutableData dataWithLength:12];
SecRandomCopyBytes(NULL, 12, iv.mutableBytes);

NSData *cipherText = [TKAESCCMCryptor encrypt:data withKey:key iv:iv];
NSData *encryptedKey = [TKRSACryptor encrypt:key withKeyInHex:keyInHex];

Or use the wrapper class TKCryptor and it’s method

+ (NSString *)encrypt:(NSData *)data publicKeyInHex:(NSString *)keyInHex;

wich does:

  • Encrypts the data with AES-CBC using generated AES256 session key and IV (12)
  • Encrypts the session key with RSA using public key (using Keychain)
  • Returns fully composed message in format:
    • a prefix ("")
    • a separator ($)
    • RSA encrypted AES key, base64 encoded
    • a separator ($)
    • a Payload of iv and cipherText, base64 encoded


  • AES 256 key
  • no additional auth data
  • tagLength = 8
  • ivLength = 12
  • L = 3
  • RSA stores certificate to Keychain by fingerprint (SHA1)
  • keyInHex format is Exponent|Modulus


TKCryptor is available through CocoaPods. To install
it, simply add the following line to your Podfile:

pod "TKCryptor", :git => ""



TKCryptor is available under the MIT license. See the LICENSE file for more info.

Latest podspec

    "name": "TKCryptor",
    "version": "1.2.0",
    "summary": "AES-CCM encryption and RSA from modulus & exponent",
    "description": "* Ability to do AES CCM encryptionn* Ability to use Modulus and Exponent in RSA encryptionn* Native iOS code without dependancies, no need in OpenSSLn* Tested with RFC 3610 test vectors",
    "homepage": "",
    "license": "MIT",
    "authors": {
        "Taras Kalapun": "[email protected]"
    "source": {
        "git": "",
        "tag": "1.2.0"
    "platforms": {
        "ios": "7.0"
    "requires_arc": true,
    "source_files": "TKCryptor",
    "frameworks": "Security"

Pin It on Pinterest

Share This