Documentation

cURL

curl --request GET \
  --url https://api.eka.care/abdm/v1/ecdh/keys \
  --header 'Authorization: Bearer <token>'

{
  "nonce": "<string>",
  "private_key": "<string>",
  "public_key": "<string>"
}

Encryption

Generate ECDH Key Pair

Generate an ECDH key pair with nonce for encryption/decryption operations.

This API generates a new ECDH key pair on Curve25519 (Weierstrass form) along with a random 32-byte nonce. The key pair and nonce are used for encrypting and decrypting health data exchanged via ABDM.

Algorithm details:

Key Agreement: ECDH on Curve25519 (Weierstrass form)
Key Derivation: HKDF-SHA256
Symmetric Encryption: AES-256-GCM
Nonce Handling: IV and salt are derived from XOR of sender and receiver nonces

Store the private key securely on your side. The public key and nonce are shared with the counterparty (HIP/HIU) during data exchange.

For more details, refer to the ABDM Encryption and Decryption Guide.

GET

abdm

ecdh

keys

cURL

curl --request GET \
  --url https://api.eka.care/abdm/v1/ecdh/keys \
  --header 'Authorization: Bearer <token>'

{
  "nonce": "<string>",
  "private_key": "<string>",
  "public_key": "<string>"
}

Authorizations

Authorization

string

header

required

The API requires a Bearer token (JWT) for authentication.

Response

nonce

string

Random nonce generated for the key pair

private_key

string

Base64-encoded ECDH private key

public_key

string

Base64-encoded ECDH public key

Overview Encrypt Data

⌘I

Authorization

End-to-End Encryption

Connect

HealthAI

Medical Database

General Tools

Doctor Tool

ABDM Connect

Medical Knowledge-bases

Medical Records

User App

Generate ECDH Key Pair

Authorizations

Response