blocks|key|1067952|text|你需要先对结果进行十六进制编码。MessageDigest返回一个“原始”散列，而不是人类可读的散列。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1067953|编辑：|1067954|@thejh提供了一个指向应该可以工作的代码的链接。就我个人而言，我建议使用Bouncycastle或Apache+Commons+Codec来完成这项工作。如果您想执行任何其他与密码相关的操作，Bouncycastle将是不错的选择。|1067955|entityMap|0|LINK|mutability|MUTABLE|url|http://www.bouncycastle.org/|1|http://commons.apache.org/codec/^0|G|D|0|0|12|C|0|1F|K|1|0^^$0|@$1|2|3|4|5|6|7|T|8|@$9|U|A|V|B|C]]|D|@]|E|$]]|$1|F|3|G|5|6|7|W|8|@]|D|@]|E|$]]|$1|H|3|I|5|6|7|X|8|@]|D|@$9|Y|A|Z|1|10]|$9|11|A|12|1|13]]|E|$]]|$1|J|3|-4|5|6|7|14|8|@]|D|@]|E|$]]]|K|$L|$5|M|N|O|E|$P|Q]]|R|$5|M|N|O|E|$P|S]]]]

You need to hex encode the result first. <code>MessageDigest</code> returns a "raw" hash, rather than a human readable one.

Edit:

@thejh provided a link to code which should work. Personally, I'd suggest using either <a href="http://www.bouncycastle.org/" rel="nofollow">Bouncycastle</a> or <a href="http://commons.apache.org/codec/" rel="nofollow">Apache Commons Codec</a> to do the job. Bouncycastle would be good if you want to do any other crypto-related operations.

blocks|key|1068042|text|digest()返回一个字节数组，您可以使用默认编码将其转换为字符串。你想做的是对它进行base64编码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1068043|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

digest() returns a byte array, which you're converting to a string using the default encoding. What you want to do is base64 encode it.

blocks|key|853626|text|之所以会发生这种情况，是因为cript.digest()返回一个字节数组，您正试图将其打印为字符串。您希望将其转换为可打印的十六进制字符串。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|853627|简单的解决方案:使用Apache的commons-codec+library|offset|length|853628|String+password+=+new+String(Hex.encodeHex(cript.digest()),
+++++++++++++++++++++++++++++CharSet.forName("UTF-8"));|code-block|syntax|javascript|853629|entityMap|0|LINK|mutability|MUTABLE|url|http://commons.apache.org/codec/^0|0|H|L|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|T|8|@]|9|@$D|U|E|V|1|W]]|A|$]]|$1|F|3|G|5|H|7|X|8|@]|9|@]|A|$I|J]]|$1|K|3|-4|5|6|7|Y|8|@]|9|@]|A|$]]]|L|$M|$5|N|O|P|A|$Q|R]]]]

This is happening because cript.digest() returns a byte array, which you're trying to print out as a character String. You want to convert it to a printable Hex String.

Easy solution: Use Apache's <a href="http://commons.apache.org/codec/" rel="noreferrer">commons-codec library</a>:

<pre><code>String password = new String(Hex.encodeHex(cript.digest()),
 CharSet.forName("UTF-8"));
</code></pre>

blocks|key|1068206|text|哈希算法的一次迭代是不安全的。太快了。您需要通过多次迭代散列来执行键强化。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1068207|此外，您没有对密码进行加盐处理。这为预先计算的字典创建了一个漏洞，比如“彩虹表”。|1068208|您可以使用Java运行时中内置的代码，而不是尝试使用自己的代码(或使用一些粗略的第三方臃肿软件)来正确完成此操作。详情请参见this+answer。|offset|length|1068209|一旦您正确地对密码进行了哈希处理，您就会得到一个byte[]。将其转换为十六进制String的一种简单方法是使用BigInteger类：|style|CODE|1068210|String+passwordHash+=+new+BigInteger(1,+cript.digest()).toString(16);|code-block|syntax|javascript|1068211|如果您希望确保字符串始终包含40个字符，则可能需要在左侧填充一些零(可以使用String.format()完成此操作)。|1068212|entityMap|0|LINK|mutability|MUTABLE|url|https://stackoverflow.com/questions/2860943/suggestions-for-library-to-hash-passwords-in-java/2861125#2861125^0|0|0|1Q|B|0|0|O|6|14|6|1K|A|0|0|12|F|0^^$0|@$1|2|3|4|5|6|7|10|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|11|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|12|8|@]|9|@$F|13|G|14|1|15]]|A|$]]|$1|H|3|I|5|6|7|16|8|@$F|17|G|18|J|K]|$F|19|G|1A|J|K]|$F|1B|G|1C|J|K]]|9|@]|A|$]]|$1|L|3|M|5|N|7|1D|8|@]|9|@]|A|$O|P]]|$1|Q|3|R|5|6|7|1E|8|@$F|1F|G|1G|J|K]]|9|@]|A|$]]|$1|S|3|-4|5|6|7|1H|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]]]

One iteration of a hash algorithm is not secure. It's too fast. You need to perform key strengthening by iterating the hash many times.

Furthermore, you are not salting the password. This creates a vulnerability to pre-computed dictionaries, like "rainbow tables."

Instead of trying to roll your own code (or using some sketchy third-party bloatware) to do this correctly, you can use code built-in to the Java runtime. See <a href="https://stackoverflow.com/questions/2860943/suggestions-for-library-to-hash-passwords-in-java/2861125#2861125">this answer</a> for details.

Once you have hashed the password correctly, you'll have a <code>byte[]</code>. An easy way to convert this to a hexadecimal <code>String</code> is with the <code>BigInteger</code> class:

<pre><code>String passwordHash = new BigInteger(1, cript.digest()).toString(16);
</code></pre>

If you want to make sure that your string always has 40 characters, you may need to do some padding with zeroes on the left (you could do this with <code>String.format()</code>.)

blocks|key|853747|text|crypt.digest()方法返回一个byte[]。这个字节数组是正确的SHA-1和，但是加密散列通常以十六进制的形式显示给人类。散列中的每个字节都将产生两个十六进制数字。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|853748|要安全地将字节转换为十六进制，请使用以下命令：|853749|//+%251$+==+arg+1
//+02++==+pad+with+0's
//+x+++==+convert+to+hex
String+hex+=+String.format("%251$02x",+byteValue);|code-block|syntax|javascript|853750|This+code+snippet+can+be+used+for+converting+a+char+to+hex|offset|length|853751|/*
+*+Copyright+(c)+1995,+2008,+Oracle+and/or+its+affiliates.+All+rights+reserved.
+*
+*+Redistribution+and+use+in+source+and+binary+forms,+with+or+without
+*+modification,+are+permitted+provided+that+the+following+conditions
+*+are+met:
+*
+*+++-+Redistributions+of+source+code+must+retain+the+above+copyright
+*+++++notice,+this+list+of+conditions+and+the+following+disclaimer.
+*
+*+++-+Redistributions+in+binary+form+must+reproduce+the+above+copyright
+*+++++notice,+this+list+of+conditions+and+the+following+disclaimer+in+the
+*+++++documentation+and/or+other+materials+provided+with+the+distribution.
+*
+*+++-+Neither+the+name+of+Oracle+or+the+names+of+its
+*+++++contributors+may+be+used+to+endorse+or+promote+products+derived
+*+++++from+this+software+without+specific+prior+written+permission.
+*
+*+THIS+SOFTWARE+IS+PROVIDED+BY+THE+COPYRIGHT+HOLDERS+AND+CONTRIBUTORS+"AS
+*+IS"+AND+ANY+EXPRESS+OR+IMPLIED+WARRANTIES,+INCLUDING,+BUT+NOT+LIMITED+TO,
+*+THE+IMPLIED+WARRANTIES+OF+MERCHANTABILITY+AND+FITNESS+FOR+A+PARTICULAR
+*+PURPOSE+ARE+DISCLAIMED.++IN+NO+EVENT+SHALL+THE+COPYRIGHT+OWNER+OR
+*+CONTRIBUTORS+BE+LIABLE+FOR+ANY+DIRECT,+INDIRECT,+INCIDENTAL,+SPECIAL,
+*+EXEMPLARY,+OR+CONSEQUENTIAL+DAMAGES+(INCLUDING,+BUT+NOT+LIMITED+TO,
+*+PROCUREMENT+OF+SUBSTITUTE+GOODS+OR+SERVICES;+LOSS+OF+USE,+DATA,+OR
+*+PROFITS;+OR+BUSINESS+INTERRUPTION)+HOWEVER+CAUSED+AND+ON+ANY+THEORY+OF
+*+LIABILITY,+WHETHER+IN+CONTRACT,+STRICT+LIABILITY,+OR+TORT+(INCLUDING
+*+NEGLIGENCE+OR+OTHERWISE)+ARISING+IN+ANY+WAY+OUT+OF+THE+USE+OF+THIS
+*+SOFTWARE,+EVEN+IF+ADVISED+OF+THE+POSSIBILITY+OF+SUCH+DAMAGE.
+*/+
import+java.io.*;

public+class+UnicodeFormatter++{

+++static+public+String+byteToHex(byte+b)+{
++++++//+Returns+hex+String+representation+of+byte+b
++++++char+hexDigit[]+=+{
+++++++++'0',+'1',+'2',+'3',+'4',+'5',+'6',+'7',
+++++++++'8',+'9',+'a',+'b',+'c',+'d',+'e',+'f'
++++++};
++++++char[]+array+=+{+hexDigit[(b+>>+4)+&+0x0f],+hexDigit[b+&+0x0f]+};
++++++return+new+String(array);
+++}

+++static+public+String+charToHex(char+c)+{
++++++//+Returns+hex+String+representation+of+char+c
++++++byte+hi+=+(byte)+(c+>>>+8);
++++++byte+lo+=+(byte)+(c+&+0xff);
++++++return+byteToHex(hi)+%2B+byteToHex(lo);
+++}
}|853752|请注意，在Java中处理字节非常容易出错。我会仔细检查所有东西，也会测试一些奇怪的案例。|853753|此外，您应该考虑使用比SHA-1更强的产品。http://csrc.nist.gov/groups/ST/hash/statement.html|853754|entityMap|0|LINK|mutability|MUTABLE|url|http://download.oracle.com/javase/tutorial/i18n/text/examples/UnicodeFormatter.java|1|http://csrc.nist.gov/groups/ST/hash/statement.html^0|0|0|0|0|1M|0|0|0|0|M|1E|1|0^^$0|@$1|2|3|4|5|6|7|12|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|13|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|14|8|@]|9|@]|A|$G|H]]|$1|I|3|J|5|6|7|15|8|@]|9|@$K|16|L|17|1|18]]|A|$]]|$1|M|3|N|5|F|7|19|8|@]|9|@]|A|$G|H]]|$1|O|3|P|5|6|7|1A|8|@]|9|@]|A|$]]|$1|Q|3|R|5|6|7|1B|8|@]|9|@$K|1C|L|1D|1|1E]]|A|$]]|$1|S|3|-4|5|6|7|1F|8|@]|9|@]|A|$]]]|T|$U|$5|V|W|X|A|$Y|Z]]|10|$5|V|W|X|A|$Y|11]]]]

The crypt.digest() method returns a byte[]. This byte array is the correct SHA-1 sum, but crypto hashes are typically displayed to humans in hex form. Each byte in your hash will result in two hex digits.

To safely convert a byte to hex use this:

<pre><code>// %1$ == arg 1
// 02 == pad with 0's
// x == convert to hex
String hex = String.format("%1$02x", byteValue);
</code></pre>

<a href="http://download.oracle.com/javase/tutorial/i18n/text/examples/UnicodeFormatter.java" rel="nofollow">This code snippet can be used for converting a char to hex</a>:

<pre><code>/*
 * Copyright (c) 1995, 2008, Oracle and/or its affiliates. All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 *
 * - Redistributions of source code must retain the above copyright
 * notice, this list of conditions and the following disclaimer.
 *
 * - Redistributions in binary form must reproduce the above copyright
 * notice, this list of conditions and the following disclaimer in the
 * documentation and/or other materials provided with the distribution.
 *
 * - Neither the name of Oracle or the names of its
 * contributors may be used to endorse or promote products derived
 * from this software without specific prior written permission.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS
 * IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
 * THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
 * PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR
 * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL,
 * EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO,
 * PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR
 * PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF
 * LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING
 * NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
 * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
 */ 
import java.io.*;

public class UnicodeFormatter {

 static public String byteToHex(byte b) {
 // Returns hex String representation of byte b
 char hexDigit[] = {
 '0', '1', '2', '3', '4', '5', '6', '7',
 '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'
 };
 char[] array = { hexDigit[(b &gt;&gt; 4) &amp; 0x0f], hexDigit[b &amp; 0x0f] };
 return new String(array);
 }

 static public String charToHex(char c) {
 // Returns hex String representation of char c
 byte hi = (byte) (c &gt;&gt;&gt; 8);
 byte lo = (byte) (c &amp; 0xff);
 return byteToHex(hi) + byteToHex(lo);
 }
}
</code></pre>

Note that working with bytes in Java is very error prone. I would double check everything and test some strange cases as well. 

Also you should consider using something stronger than SHA-1.
<a href="http://csrc.nist.gov/groups/ST/hash/statement.html" rel="nofollow">http://csrc.nist.gov/groups/ST/hash/statement.html</a>

blocks|key|853776|text|使用apache公共编解码库：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|853777|DigestUtils.sha1Hex("aff")|code-block|syntax|javascript|853778|结果是0c05aa56405c447e6678b7f3127febde5c3a9238|853779|就是这样:)|853780|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|P|8|@]|9|@]|A|$]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

Using apache common codec library:

<pre><code>DigestUtils.sha1Hex("aff")
</code></pre>

The result is 0c05aa56405c447e6678b7f3127febde5c3a9238

That's it :)

blocks|key|1068325|text|如果你使用Spring，那就很简单了：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1068326|MessageDigestPasswordEncoder+encoder+=+new+MessageDigestPasswordEncoder("SHA-1");
String+hash+=+encoder.encodePassword(password,+"salt+goes+here");|code-block|syntax|javascript|1068327|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you use Spring its quite simple:

<pre><code>MessageDigestPasswordEncoder encoder = new MessageDigestPasswordEncoder("SHA-1");
String hash = encoder.encodePassword(password, "salt goes here");
</code></pre>

blocks|key|853817|text|如何将byte[]转换为base64字符串？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|853818|++++byte[]+chkSumBytArr+=+digest.digest();
++++BASE64Encoder+encoder+=+new+BASE64Encoder();
++++String+base64CheckSum+=+encoder.encode(chkSumBytArr);|code-block|syntax|javascript|853819|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

How about converting byte[] to base64 string?

<pre><code> byte[] chkSumBytArr = digest.digest();
 BASE64Encoder encoder = new BASE64Encoder();
 String base64CheckSum = encoder.encode(chkSumBytArr);
</code></pre>

blocks|key|1068370|text|您也可以使用以下代码(来自crackstation.net)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1068371|private+static+String+toHex(byte[]+array)
{
++++BigInteger+bi+=+new+BigInteger(1,+array);
++++String+hex+=+bi.toString(16);
++++int+paddingLength+=+(array.length+*+2)+-+hex.length();
++++if(paddingLength+>+0)
++++++++return+String.format("%250"+%2B+paddingLength+%2B+"d",+0)+%2B+hex;
++++else
++++++++return+hex;
}|code-block|syntax|javascript|1068372|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

you can use this code too(from crackstation.net):
<pre><code>private static String toHex(byte[] array)
{
 BigInteger bi = new BigInteger(1, array);
 String hex = bi.toString(16);
 int paddingLength = (array.length * 2) - hex.length();
 if(paddingLength &gt; 0)
 return String.format(&quot;%0&quot; + paddingLength + &quot;d&quot;, 0) + hex;
 else
 return hex;
}
</code></pre>

blocks|key|853857|text|如果您不想向项目中添加任何额外的依赖项，还可以使用|type|unstyled|depth|inlineStyleRanges|entityRanges|data|853858|MessageDigest+digest+=+MessageDigest.getInstance("SHA-1");
digest.update(message.getBytes("utf8"));
byte[]+digestBytes+=+digest.digest();
String+digestStr+=+javax.xml.bind.DatatypeConverter.printHexBinary(digestBytes);|code-block|syntax|javascript|853859|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

If you don't want to add any extra dependencies to your project, you could also use

<pre><code>MessageDigest digest = MessageDigest.getInstance("SHA-1");
digest.update(message.getBytes("utf8"));
byte[] digestBytes = digest.digest();
String digestStr = javax.xml.bind.DatatypeConverter.printHexBinary(digestBytes);
</code></pre>

blocks|key|1068405|text|使用Google+Guava|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1068406|Maven：|1068407|<dependency>
+++<artifactId>guava</artifactId>
+++<groupId>com.google.guava</groupId>
+++<version>14.0.1</version>
</dependency>|code-block|syntax|javascript|1068408|示例：|1068409|HashCode+hashCode+=+Hashing.sha1().newHasher()
+++.putString(password,+Charsets.UTF_8)
+++.hash();++++++++++++

String+hash+=+BaseEncoding.base16().lowerCase().encode(hashCode.asBytes());|1068410|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/google/guava^0|2|C|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@]|9|@$A|X|B|Y|1|Z]]|C|$]]|$1|D|3|E|5|6|7|10|8|@]|9|@]|C|$]]|$1|F|3|G|5|H|7|11|8|@]|9|@]|C|$I|J]]|$1|K|3|L|5|6|7|12|8|@]|9|@]|C|$]]|$1|M|3|N|5|H|7|13|8|@]|9|@]|C|$I|J]]|$1|O|3|-4|5|6|7|14|8|@]|9|@]|C|$]]]|P|$Q|$5|R|S|T|C|$U|V]]]]

With <a href="https://github.com/google/guava" rel="nofollow noreferrer">Google Guava</a>:

Maven:

<pre><code>&lt;dependency&gt;
 &lt;artifactId&gt;guava&lt;/artifactId&gt;
 &lt;groupId&gt;com.google.guava&lt;/groupId&gt;
 &lt;version&gt;14.0.1&lt;/version&gt;
&lt;/dependency&gt;
</code></pre>

Sample:

<pre><code>HashCode hashCode = Hashing.sha1().newHasher()
 .putString(password, Charsets.UTF_8)
 .hash(); 

String hash = BaseEncoding.base16().lowerCase().encode(hashCode.asBytes());
</code></pre>

blocks|key|1068415|text|++++++++MessageDigest+messageDigest+=+MessageDigest.getInstance("SHA-1");
++++++++messageDigest.reset();
++++++++messageDigest.update(password.getBytes("UTF-8"));
++++++++String+sha1String+=+new+BigInteger(1,+messageDigest.digest()).toString(16);|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|1068416|unstyled|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|G|8|@]|9|@]|A|$B|C]]|$1|D|3|-4|5|E|7|H|8|@]|9|@]|A|$]]]|F|$]]

<pre><code> MessageDigest messageDigest = MessageDigest.getInstance("SHA-1");
 messageDigest.reset();
 messageDigest.update(password.getBytes("UTF-8"));
 String sha1String = new BigInteger(1, messageDigest.digest()).toString(16);
</code></pre>

blocks|key|1068454|text|echo+-n+"aff“%7C+sha1sum生成正确的输出(echo默认插入新行)|type|unstyled|depth|inlineStyleRanges|entityRanges|data|1068455|entityMap^0|0^^$0|@$1|2|3|4|5|6|7|D|8|@]|9|@]|A|$]]|$1|B|3|-4|5|6|7|E|8|@]|9|@]|A|$]]]|C|$]]

echo -n "aff" | sha1sum produce the correct output (echo inserts a newline by default)

blocks|key|854031|text|在Java17中引入了HexFormat。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|854032|它允许您编写以下代码：|854033|var+cript+=+MessageDigest.getInstance("sha1");
var+hexformat+=+HexFormat.of();
this.password+=+hexformat.formatHex(cript.digest(userPass.getBytes(StandardCharsets.UTF_8)))|code-block|syntax|javascript|854034|entityMap|0|LINK|mutability|MUTABLE|url|https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/HexFormat.html^0|B|9|B|9|0|0|0|0^^$0|@$1|2|3|4|5|6|7|U|8|@$9|V|A|W|B|C]]|D|@$9|X|A|Y|1|Z]]|E|$]]|$1|F|3|G|5|6|7|10|8|@]|D|@]|E|$]]|$1|H|3|I|5|J|7|11|8|@]|D|@]|E|$K|L]]|$1|M|3|-4|5|6|7|12|8|@]|D|@]|E|$]]]|N|$O|$5|P|Q|R|E|$S|T]]]]

In java 17 <a href="https://docs.oracle.com/en/java/javase/17/docs/api/java.base/java/util/HexFormat.html" rel="nofollow noreferrer"><code>HexFormat</code></a> is introduced.
It allows you to write:
<pre class="lang-java prettyprint-override"><code>var cript = MessageDigest.getInstance(&quot;sha1&quot;);
var hexformat = HexFormat.of();
this.password = hexformat.formatHex(cript.digest(userPass.getBytes(StandardCharsets.UTF_8)))
</code></pre>

I'm storing the user password on the db as a sha1 hash.

Unfortunately I'm getting strange answers.

I'm storing the string as this:

<pre><code>MessageDigest cript = MessageDigest.getInstance("SHA-1");
 cript.reset();
 cript.update(userPass.getBytes("utf8"));
 this.password = new String(cript.digest());
</code></pre>

I wanted something like this -->

aff --> "0c05aa56405c447e6678b7f3127febde5c3a9238"

rather than

aff --> �V@\D~fx����:�8

Java calculate hex representation of a SHA-1 digest of a String

数据库

Java

我将用户密码以sha1散列的形式存储在数据库中。不幸的是，我得到了奇怪的答案。我将字符串存储为：MessageDigest cript = MessageDigest.getInstance("SHA-1");              cript.reset();              cript.update(...

问字符串SHA-1摘要的Java计算十六进制表示
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问字符串SHA-1摘要的Java计算十六进制表示EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问字符串SHA-1摘要的Java计算十六进制表示
EN