# Sign and verify using RSA key

This sample app demonstrates how to generate a RSA key, sign given data using this key and verify data using this key.

1. Get a SecurityFactory instance

auto &secFact = telux::sec::SecurityFactory::getInstance();
    Copy to clipboard

2. Get a CryptoManager instance

std::shared_ptr<telux::sec::ICryptoManager> cryptMgr;
    
    cryptMgr = secFact.getCryptoManager(ec);
    if (!cryptMgr) {
        std::cout << "Can't allocate CryptoManager, err: " <<
                static_cast<int>(ec) << std::endl;
        return -1;
    }
    Copy to clipboard

3. Define parameters using CryptoParamBuilder for the key

std::shared_ptr<telux::sec::ICryptoParam> cp;
    
    cp = telux::sec::CryptoParamBuilder()
            .setAlgorithm(telux::sec::Algorithm::ALGORITHM_RSA)
            .setCryptoOperation(telux::sec::CryptoOperation::CRYPTO_OP_SIGN |
                        telux::sec::CryptoOperation::CRYPTO_OP_VERIFY)
            .setKeySize(2048)
            .setPublicExponent(65537)
            .setDigest(telux::sec::Digest::DIGEST_SHA_2_256 |
                    telux::sec::Digest::DIGEST_SHA_2_512)
            .setPadding(telux::sec::Padding::PADDING_RSA_PSS |
                    telux::sec::Padding::PADDING_RSA_PKCS1_1_5_SIGN)
            .build();
    Copy to clipboard

4. Generate RSA key using generateKey() API

telux::common::ErrorCode ec;
    std::vector<uint8_t> kb;
    
    ec = cryptMgr->generateKey(cp, kb);
    if (ec != telux::common::ErrorCode::SUCCESS) {
        std::cout << "Can't generate RSA asym key, err: " <<
                static_cast<int>(ec) << std::endl;
        return -1;
    }
    Copy to clipboard

5. Define data to be signed

std::vector<uint8_t> pt {'h', 'e', 'l', 'l', 'o'};
    Copy to clipboard

6. Define parameters using CryptoParamBuilder for signing/verifying data

cp = telux::sec::CryptoParamBuilder()
            .setAlgorithm(telux::sec::Algorithm::ALGORITHM_RSA)
            .setDigest(telux::sec::Digest::DIGEST_SHA_2_256)
            .setPadding(telux::sec::Padding::PADDING_RSA_PKCS1_1_5_SIGN)
            .build();
    Copy to clipboard

7. Sign the required data using signData() API

std::vector<uint8_t> sg;
    
    ec = cryptMgr->signData(cp, kb, pt, sg);
    if (ec != telux::common::ErrorCode::SUCCESS) {
        std::cout << "Can't sign data, err: " <<
                static_cast<int>(ec) << std::endl;
        return -1;
    }
    Copy to clipboard

8. Verify authenticity of data using verifyData() API

ec = cryptMgr->verifyData(cp, kb, pt, sg);
    
    if (ec != telux::common::ErrorCode::SUCCESS) {
        if (ec == telux::common::ErrorCode::VERIFICATION_FAILED)
            std::cout << "Invalid signature for given data!" << std::endl;
        else
            std::cout << "Can't verify data, err: " << static_cast<int>(ec) << std::endl;
        return -1;
    }
    Copy to clipboard

Last Published: Aug 05, 2026

[Previous Topic
Sign and verify using EC key](https://docs.qualcomm.com/bundle/publicresource/80-PF458-9/topics/ECAsymKeySignVerifyApp.md) [Next Topic
Encrypt and decrypt using AES key](https://docs.qualcomm.com/bundle/publicresource/80-PF458-9/topics/AESsymEncDecApp.md)