blocks|key|4461798|text|您可以将其用于SHA-512|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4461799|import+java.nio.charset.StandardCharsets;
import+java.security.MessageDigest;
import+java.security.NoSuchAlgorithmException;

public+String+get_SHA_512_SecurePassword(String+passwordToHash,+String+salt){
++++String+generatedPassword+=+null;
++++try+{
++++++++MessageDigest+md+=+MessageDigest.getInstance("SHA-512");
++++++++md.update(salt.getBytes(StandardCharsets.UTF_8));
++++++++byte[]+bytes+=+md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));
++++++++StringBuilder+sb+=+new+StringBuilder();
++++++++for(int+i=0;+i<+bytes.length+;i%2B%2B){
++++++++++++sb.append(Integer.toString((bytes[i]+&+0xff)+%2B+0x100,+16).substring(1));
++++++++}
++++++++generatedPassword+=+sb.toString();
++++}+catch+(NoSuchAlgorithmException+e)+{
++++++++e.printStackTrace();
++++}
++++return+generatedPassword;
}|code-block|syntax|javascript|4461800|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

you can use this for SHA-512

<pre><code>import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;

public String get_SHA_512_SecurePassword(String passwordToHash, String salt){
 String generatedPassword = null;
 try {
 MessageDigest md = MessageDigest.getInstance("SHA-512");
 md.update(salt.getBytes(StandardCharsets.UTF_8));
 byte[] bytes = md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));
 StringBuilder sb = new StringBuilder();
 for(int i=0; i&lt; bytes.length ;i++){
 sb.append(Integer.toString((bytes[i] &amp; 0xff) + 0x100, 16).substring(1));
 }
 generatedPassword = sb.toString();
 } catch (NoSuchAlgorithmException e) {
 e.printStackTrace();
 }
 return generatedPassword;
}
</code></pre>

blocks|key|4462160|text|使用Guava|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|4462161|Hashing.sha512().hashString(s,+StandardCharsets.UTF_8).toString()|code-block|syntax|javascript|4462162|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/google/guava^0|2|5|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@$A|R|B|S|1|T]]|C|$]]|$1|D|3|E|5|F|7|U|8|@]|9|@]|C|$G|H]]|$1|I|3|-4|5|6|7|V|8|@]|9|@]|C|$]]]|J|$K|$5|L|M|N|C|$O|P]]]]

Using <a href="https://github.com/google/guava" rel="noreferrer">Guava</a>:

<pre><code>Hashing.sha512().hashString(s, StandardCharsets.UTF_8).toString()
</code></pre>

blocks|key|4461857|text|使用Apache+Commons+Crypt，它的特色是基于SHA-512的crypt()函数，这些函数生成的加盐哈希甚至与libc的crypt兼容，因此也可以在PHP/Perl/Python/C和大多数数据库中使用。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4461858|https://commons.apache.org/proper/commons-codec/apidocs/org/apache/commons/codec/digest/Crypt.html#Crypt%2528%2529|offset|length|4461859|entityMap|0|LINK|mutability|MUTABLE|url|https://commons.apache.org/proper/commons-codec/apidocs/org/apache/commons/codec/digest/Crypt.html#Crypt%2528%2529^0|0|0|32|0|0^^$0|@$1|2|3|4|5|6|7|N|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|O|8|@]|9|@$D|P|E|Q|1|R]]|A|$]]|$1|F|3|-4|5|6|7|S|8|@]|9|@]|A|$]]]|G|$H|$5|I|J|K|A|$L|M]]]]

Use Apache Commons Crypt, it features SHA-512 based crypt() functions that generate salted hashes that are even compatible to libc's crypt and thus usable in PHP/Perl/Python/C and most databases, too.

<a href="https://commons.apache.org/proper/commons-codec/apidocs/org/apache/commons/codec/digest/Crypt.html#Crypt%28%29" rel="nofollow">https://commons.apache.org/proper/commons-codec/apidocs/org/apache/commons/codec/digest/Crypt.html#Crypt%28%29</a>

blocks|key|4462010|text|如果你愿意，你可以在java中使用它来散列密码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4462011|public+static+boolean+isHashMatch(String+password,+//+the+password+you+want+to+check.
++++++++++++++++++++++++++++++++++String+saltedHash,+//+the+salted+hash+you+want+to+check+your+password+against.
++++++++++++++++++++++++++++++++++String+hashAlgorithm,+//+the+algorithm+you+want+to+use.
++++++++++++++++++++++++++++++++++String+delimiter)+throws+NoSuchAlgorithmException+//+the+delimiter+that+has+been+used+to+delimit+the+salt+and+the+hash.
{
++++//+get+the+salt+from+the+salted+hash+and+decode+it+into+a+byte[].
++++byte[]+salt+=+Base64.getDecoder()
++++++++++++++++++++++++.decode(saltedHash.split(delimiter)[0]);
++++//+compute+a+new+salted+hash+based+on+the+provided+password+and+salt.
++++String+pw_saltedHash+=+computeSaltedBase64Hash(password,+
+++++++++++++++++++++++++++++++++++++++++++++++++++salt,
+++++++++++++++++++++++++++++++++++++++++++++++++++hashAlgorithm,
+++++++++++++++++++++++++++++++++++++++++++++++++++delimiter);
++++//+check+if+the+provided+salted+hash+matches+the+salted+hash+we+computed+from+the+password+and+salt.
++++return+saltedHash.equals(pw_saltedHash);
}

public+static+String+computeSaltedBase64Hash(String+password,+//+the+password+you+want+to+hash
+++++++++++++++++++++++++++++++++++++++++++++String+hashAlgorithm,+//+the+algorithm+you+want+to+use.
+++++++++++++++++++++++++++++++++++++++++++++String+delimiter)+throws+NoSuchAlgorithmException+//+the+delimiter+that+will+be+used+to+delimit+the+salt+and+the+hash.
{
++++//+compute+the+salted+hash+with+a+random+salt.
++++return+computeSaltedBase64Hash(password,+null,+hashAlgorithm,+delimiter);
}

public+static+String+computeSaltedBase64Hash(String+password,+//+the+password+you+want+to+hash
+++++++++++++++++++++++++++++++++++++++++++++byte[]+salt,+//+the+salt+you+want+to+use+(uses+random+salt+if+null).
+++++++++++++++++++++++++++++++++++++++++++++String+hashAlgorithm,+//+the+algorithm+you+want+to+use.
+++++++++++++++++++++++++++++++++++++++++++++String+delimiter)+throws+NoSuchAlgorithmException+//+the+delimiter+that+will+be+used+to+delimit+the+salt+and+the+hash.
{
++++//+transform+the+password+string+into+a+byte[].+we+have+to+do+this+to+work+with+it+later.
++++byte[]+passwordBytes+=+password.getBytes();
++++byte[]+saltBytes;

++++if(salt+!=+null)
++++{
++++++++saltBytes+=+salt;
++++}
++++++++else
++++++++{
++++++++++++//+if+null+has+been+provided+as+salt+parameter+create+a+new+random+salt.
++++++++++++saltBytes+=+new+byte[64];
++++++++++++SecureRandom+secureRandom+=+new+SecureRandom();
++++++++++++secureRandom.nextBytes(saltBytes);++++++++++++++
++++++++}

++++//+MessageDigest+converts+our+password+and+salt+into+a+hash.+
++++MessageDigest+messageDigest+=+MessageDigest.getInstance(hashAlgorithm);
++++//+concatenate+the+salt+byte[]+and+the+password+byte[].
++++byte[]+saltAndPassword+=+concatArrays(saltBytes,+passwordBytes);
++++//+create+the+hash+from+our+concatenated+byte[].
++++byte[]+saltedHash+=+messageDigest.digest(saltAndPassword);
++++//+get+java's+base64+encoder+for+encoding.
++++Encoder+base64Encoder+=+Base64.getEncoder();
++++//+create+a+StringBuilder+to+build+the+result.
++++StringBuilder+result+=+new+StringBuilder();

++++result.append(base64Encoder.encodeToString(saltBytes))+//+base64-encode+the+salt+and+append+it.
++++++++++.append(delimiter)+//+append+the+delimiter+(watch+out!+don't+use+regex+expressions+as+delimiter+if+you+plan+to+use+String.split()+to+isolate+the+salt!)
++++++++++.append(base64Encoder.encodeToString(saltedHash));+//+base64-encode+the+salted+hash+and+append+it.

++++//+return+a+salt+and+salted+hash+combo.
++++return+result.toString();
}

public+static+byte[]+concatArrays(byte[]...+arrays)
{+++
++++int+concatLength+=+0;
++++//+get+the+actual+length+of+all+arrays+and+add+it+so+we+know+how+long+our+concatenated+array+has+to+be.
++++for(int+i+=+0;+i<+arrays.length;+i%2B%2B)
++++{
++++++++concatLength+=+concatLength+%2B+arrays[i].length;
++++}
++++//+prepare+our+concatenated+array+which+we're+going+to+return+later.
++++byte[]+concatArray+=+new+byte[concatLength];
++++//+this+index+tells+us+where+we+write+into+our+array.
++++int+index+=+0;
++++//+concatenate+the+arrays.
++++for(int+i+=+0;+i+<+arrays.length;+i%2B%2B)
++++{
++++++++for(int+j+=+0;+j+<+arrays[i].length;+j%2B%2B)
++++++++{
++++++++++++concatArray[index]+=+arrays[i][j];
++++++++++++index%2B%2B;
++++++++}
++++}
++++//+return+the+concatenated+arrays.
++++return+concatArray;+++++
}|code-block|syntax|javascript|4462012|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

you could use this to hash a password in java if you want to.

<pre><code>public static boolean isHashMatch(String password, // the password you want to check.
 String saltedHash, // the salted hash you want to check your password against.
 String hashAlgorithm, // the algorithm you want to use.
 String delimiter) throws NoSuchAlgorithmException // the delimiter that has been used to delimit the salt and the hash.
{
 // get the salt from the salted hash and decode it into a byte[].
 byte[] salt = Base64.getDecoder()
 .decode(saltedHash.split(delimiter)[0]);
 // compute a new salted hash based on the provided password and salt.
 String pw_saltedHash = computeSaltedBase64Hash(password, 
 salt,
 hashAlgorithm,
 delimiter);
 // check if the provided salted hash matches the salted hash we computed from the password and salt.
 return saltedHash.equals(pw_saltedHash);
}

public static String computeSaltedBase64Hash(String password, // the password you want to hash
 String hashAlgorithm, // the algorithm you want to use.
 String delimiter) throws NoSuchAlgorithmException // the delimiter that will be used to delimit the salt and the hash.
{
 // compute the salted hash with a random salt.
 return computeSaltedBase64Hash(password, null, hashAlgorithm, delimiter);
}

public static String computeSaltedBase64Hash(String password, // the password you want to hash
 byte[] salt, // the salt you want to use (uses random salt if null).
 String hashAlgorithm, // the algorithm you want to use.
 String delimiter) throws NoSuchAlgorithmException // the delimiter that will be used to delimit the salt and the hash.
{
 // transform the password string into a byte[]. we have to do this to work with it later.
 byte[] passwordBytes = password.getBytes();
 byte[] saltBytes;

 if(salt != null)
 {
 saltBytes = salt;
 }
 else
 {
 // if null has been provided as salt parameter create a new random salt.
 saltBytes = new byte[64];
 SecureRandom secureRandom = new SecureRandom();
 secureRandom.nextBytes(saltBytes); 
 }

 // MessageDigest converts our password and salt into a hash. 
 MessageDigest messageDigest = MessageDigest.getInstance(hashAlgorithm);
 // concatenate the salt byte[] and the password byte[].
 byte[] saltAndPassword = concatArrays(saltBytes, passwordBytes);
 // create the hash from our concatenated byte[].
 byte[] saltedHash = messageDigest.digest(saltAndPassword);
 // get java's base64 encoder for encoding.
 Encoder base64Encoder = Base64.getEncoder();
 // create a StringBuilder to build the result.
 StringBuilder result = new StringBuilder();

 result.append(base64Encoder.encodeToString(saltBytes)) // base64-encode the salt and append it.
 .append(delimiter) // append the delimiter (watch out! don't use regex expressions as delimiter if you plan to use String.split() to isolate the salt!)
 .append(base64Encoder.encodeToString(saltedHash)); // base64-encode the salted hash and append it.

 // return a salt and salted hash combo.
 return result.toString();
}

public static byte[] concatArrays(byte[]... arrays)
{ 
 int concatLength = 0;
 // get the actual length of all arrays and add it so we know how long our concatenated array has to be.
 for(int i = 0; i&lt; arrays.length; i++)
 {
 concatLength = concatLength + arrays[i].length;
 }
 // prepare our concatenated array which we're going to return later.
 byte[] concatArray = new byte[concatLength];
 // this index tells us where we write into our array.
 int index = 0;
 // concatenate the arrays.
 for(int i = 0; i &lt; arrays.length; i++)
 {
 for(int j = 0; j &lt; arrays[i].length; j++)
 {
 concatArray[index] = arrays[i][j];
 index++;
 }
 }
 // return the concatenated arrays.
 return concatArray; 
}
</code></pre>

blocks|key|4462153|text|import+java.nio.charset.StandardCharsets;
import+java.security.MessageDigest;
import+java.security.NoSuchAlgorithmException;
import+org.apache.commons.codec.binary.Hex;

public+String+getHashSHA512(String+StringToHash,+String+salt){
++++++++String+generatedPassword+=+null;
++++++++try+{
++++++++++++MessageDigest+md+=+MessageDigest.getInstance("SHA-512");
++++++++++++md.update(salt.getBytes(StandardCharsets.UTF_8));
++++++++++++byte[]+bytes+=+md.digest(StringToHash.getBytes(StandardCharsets.UTF_8));
++++++++++++generatedPassword+=+Hex.encodeHexString(bytes);
++++++++}
++++++++catch+(NoSuchAlgorithmException+e){
++++++++++++e.printStackTrace();
++++++++}
++++++++return+generatedPassword;
++++}|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|4462154|虽然不建议对密码使用哈希函数，但存在诸如bcrypt或scrypt之类的较新算法|unstyled|4462155|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|J|8|@]|9|@]|A|$]]|$1|G|3|-4|5|F|7|K|8|@]|9|@]|A|$]]]|H|$]]

<pre><code>import java.nio.charset.StandardCharsets;
import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;
import org.apache.commons.codec.binary.Hex;

public String getHashSHA512(String StringToHash, String salt){
 String generatedPassword = null;
 try {
 MessageDigest md = MessageDigest.getInstance("SHA-512");
 md.update(salt.getBytes(StandardCharsets.UTF_8));
 byte[] bytes = md.digest(StringToHash.getBytes(StandardCharsets.UTF_8));
 generatedPassword = Hex.encodeHexString(bytes);
 }
 catch (NoSuchAlgorithmException e){
 e.printStackTrace();
 }
 return generatedPassword;
 }
</code></pre>

It's not recommended to use hash functions for passwords though, newer alogrithms like bcrypt, or scrypt exist

blocks|key|4461937|text|使用安全散列将3个盐组件(每个150个随机字符)组合到单个用户盐(来自用户数据库表的用户盐，数据库表中的一般盐(每月使用cron作业更改)，并在应用程序库中隐藏一些盐)。使安全散列的for循环数量符合您的需要。有关散列方法，请参阅上面的答案。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|4461938|private+static+String+generateSalt(int+lenght){
++++String+abcCapitals+=+"ABCDEFGHIJKLMNOPQRSTUVWXYZ";
++++String+abcLowerCase+=+"abcdefghijklmnopqrstuvwxyz";
++++String+numbers+=+"01234567890123456789";
++++String+characters+=+"!@#$%25%5E&*!@#$%25%25%5E%5E&*";

++++String+total+=+abcCapitals+%2B+abcLowerCase+%2B+numbers+%2B+characters;

++++String+response+=+"";

++++char+letters[]+=+new+char[lenght];
++++for+(int+i=0;+i<lenght-1;+i%2B%2B){
++++++++Random+r+=+new+Random();
++++++++char+letter+=+total.charAt(r.nextInt(total.length()));
++++++++letters[i]+=+letter;
++++}

++++response+=+Arrays.toString(letters).replaceAll("\\s%2B","");
++++response+=+response.replaceAll(",","");

++++return+response;
}

private+static+String+getHash(String+passwordToHash,+String+salt){
++++++++++++String+generatedPassword+=+null;
++++++++++++try+{
+++++++++++++++++MessageDigest+md+=+MessageDigest.getInstance("SHA-512");
+++++++++++++++++md.update(salt.getBytes(StandardCharsets.UTF_8));
+++++++++++++++++byte[]+bytes+=+md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));
+++++++++++++++++StringBuilder+sb+=+new+StringBuilder();
+++++++++++++++++for(int+i=0;+i<+bytes.length+;i%2B%2B){
++++++++++++++++++++sb.append(Integer.toString((bytes[i]+&+0xff)+%2B+0x100,+16).substring(1));
+++++++++++++++++}
+++++++++++++++++generatedPassword+=+sb.toString();
++++++++++++++++}+
+++++++++++++++catch+(NoSuchAlgorithmException+e){
+++++++++++++++++++System.out.println(e);
+++++++++++++++}
++++++++++++return+generatedPassword;
++++++++}

++++public+static+String+getSecureHash(String+password,+String+salt){
++++++++String+hash+=+getHash(password,+salt);
++++++++for+(int+i=0;+i<20000;+i%2B%2B){
++++++++++++hash+=+getHash(password,+hash);++++++
++++++++}
++++++++return+hash;
++++}

++++/**
+++++*+@param+args+the+command+line+arguments
+++++*/
++++public+static+void+main(String[]+args)+{
++++++++String+salt+=+generateSalt(150);
++++++++String+salt2+=+generateSalt(150);
++++++++String+salt3+=+generateSalt(150);
++++++++String+someString+=+"This+is+some+string!";

++++++++String+hash+=+getSecureHash(someString,+salt+%2B+salt2+%2B+salt3);
++++++++System.out.println(hash);
++++}|code-block|syntax|javascript|4461939|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

With secure hashing combine 3 salt components (of 150 random characters each) to a individual user salt (user salt from the user database table, general salt in a database table (monthly change with cron job) and hide some salt in the application library). Align the for loop amount of the secure hash to your needs. See answer above for hashing method.

<pre><code>private static String generateSalt(int lenght){
 String abcCapitals = "ABCDEFGHIJKLMNOPQRSTUVWXYZ";
 String abcLowerCase = "abcdefghijklmnopqrstuvwxyz";
 String numbers = "01234567890123456789";
 String characters = "!@#$%^&amp;*!@#$%%^^&amp;*";

 String total = abcCapitals + abcLowerCase + numbers + characters;

 String response = "";

 char letters[] = new char[lenght];
 for (int i=0; i&lt;lenght-1; i++){
 Random r = new Random();
 char letter = total.charAt(r.nextInt(total.length()));
 letters[i] = letter;
 }

 response = Arrays.toString(letters).replaceAll("\\s+","");
 response = response.replaceAll(",","");

 return response;
}

private static String getHash(String passwordToHash, String salt){
 String generatedPassword = null;
 try {
 MessageDigest md = MessageDigest.getInstance("SHA-512");
 md.update(salt.getBytes(StandardCharsets.UTF_8));
 byte[] bytes = md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));
 StringBuilder sb = new StringBuilder();
 for(int i=0; i&lt; bytes.length ;i++){
 sb.append(Integer.toString((bytes[i] &amp; 0xff) + 0x100, 16).substring(1));
 }
 generatedPassword = sb.toString();
 } 
 catch (NoSuchAlgorithmException e){
 System.out.println(e);
 }
 return generatedPassword;
 }

 public static String getSecureHash(String password, String salt){
 String hash = getHash(password, salt);
 for (int i=0; i&lt;20000; i++){
 hash = getHash(password, hash); 
 }
 return hash;
 }

 /**
 * @param args the command line arguments
 */
 public static void main(String[] args) {
 String salt = generateSalt(150);
 String salt2 = generateSalt(150);
 String salt3 = generateSalt(150);
 String someString = "This is some string!";

 String hash = getSecureHash(someString, salt + salt2 + salt3);
 System.out.println(hash);
 }
</code></pre>

I've been investigating a bit about Java String encryption techniques and unfortunately I haven't find any good tutorial how to hash String with SHA-512 in Java; I read a few blogs about MD5 and Base64, but they are not as secure as I'd like to (actually, Base64 is not an encryption technique), so I prefer SHA-512.

How to hash a password with SHA-512 in Java?

哈希函数

数据库

Python

Java

Perl

我一直在研究Java String加密技术，不幸的是，我还没有找到任何好的教程如何在Java语言中使用SHA-512散列字符串；我读了一些关于MD5和Base64的博客，但它们并不像我想的那样安全(实际上，Base64不是一种加密技术)，所以我更喜欢SHA-512。

问如何在Java中使用SHA-512对密码进行哈希处理？
EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Java中使用SHA-512对密码进行哈希处理？EN

回答 6

Stack Overflow用户

Stack Overflow用户

Stack Overflow用户

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在Java中使用SHA-512对密码进行哈希处理？
EN