Telehealth URL encryption

Hi, my organization is trying to Integrate telehealth. It is purchasedan a JWT is active. Working on getting custCreate enabled. I followed the medium article, and will most likely do encryption of URL using C# in an SSIS package. The issue is the encryption. The key we have been given is 36 bytes, way to long for AES 128 specified in the article. As such, I am having trouble even testing the encryption. The website used for encryption in the article is the only site that accepts a key of that length. Is the nonce part of the key? Has the AES-GCM change altered the process? Do we have examples on the encryption? I have seen references to GitHub/zoom/zoomUtils and that is now a dead link. Please help!

Hey @chrisyo,

Good question. For the Telehealth integration, we only support AES 128 bit encryption.

Are you referring to the API Key? Make sure it is from a JWT App.

Thanks,
Tommy

Hi Tommy thanks.
I think I figured it out. Using the AES site linked in the medium article I looked at the actual code. It truncates the key. Doing this, I rewrote the code in C# for my workflow and was able to decrypt using their java example.
One question I have is :
Should we be calling applications.zoom in the URL or just zoom.us? The former gives an API key error and the latter gives a decrypt error.
Secondly,
I have emailed isv@zoom twice with no response to get custCreate enabled. Can you help with that? I can PM you our enterprise/telehealth info, just let me know.
Thanks!

Hey @chrisyo,

Happy to hear you figured it out!

It should be applications.zoom.us. Do you have a Zoom healthcare account with ISV enabled?

Apologies for the delayed responses from the ISV team, they are very backed up and working as fast as they can to support everyone.

Thanks,
Tommy

Hi @chrisyo, did you use AES-GCM encryption mode? Is there an online tool that we can use? For the encryption key, did you use firstv32 bytes of the API secret? Thanks.

Hey @vmelik,

Have you tried using the online tool mentioned in the article?

Thanks,
Tommy

Thanks @tommy. We have finally got this working after we found the right combination of encryption type, mode and padding.

1 Like

Great! Thanks for the follow up, and thanks for building with Zoom! :slight_smile:

-Tommy

Hi @vmelik, Can you please give me right combination of encryption type, mode and padding to encrypt data.

Hey @hkhatri,

Let us know if you have any questions we can assist with!

Best,
Will

Hi, @will.zoom i am facing issue with data encryption.

Error: Data decryption failed

I followed below article, but it didn’t help me.

So can you please give me right way to encrypt data.

Like, Right combination of encryption type, mode and padding to encrypt data.

Hi @hkhatri,

Can you ensure that you’ve handled the following:

  • You’ve AES encrypted (128 bit) your string using the Zoom API secret as the plain-text key and SHA1 as the hash
  • You’ve then URL encoded the encrypted string
  • You’re on a Pro or higher plan
  • You’ve had custCreate enabled for your Zoom Account

Please double check each of these settings and let me know.

Thanks,
Will

Hi @Eddie_Soliman

Can you please give me right data AES encryption sample code to encrypt data.
Because it giving me “Data decryption failed” error.

I am on pro version and already request for custCreate enabled for my Zoom Account.
But still giving me “Data decryption failed” error.

Can you please give me right data AES encryption sample code to encrypt data.

Hi @hkhatri,

Thanks for confirming these details. I’ve just private messaged you for some details around what values you’re passing in your encrypted URL so that we can further investigate.

Please reply back to my message with those additional details.

Thanks,
Will