blocks|key|258573|text|请参阅crypto.createHash()+function以及相关的hash.update()和hash.digest()函数：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|258574|var+crypto+=+require('crypto')
var+shasum+=+crypto.createHash('sha1')
shasum.update('foo')
shasum.digest('hex')+//+=>+"0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33"|code-block|syntax|javascript|258575|entityMap|0|LINK|mutability|MUTABLE|url|http://nodejs.org/api/crypto.html#crypto_crypto_createhash_algorithm|1|http://nodejs.org/api/crypto.html#crypto_hash_update_data_input_encoding|2|http://nodejs.org/api/crypto.html#crypto_hash_digest_encoding^0|3|J|10|D|1E|D|3|S|0|10|D|1|1E|D|2|0|0^^$0|@$1|2|3|4|5|6|7|W|8|@$9|X|A|Y|B|C]|$9|Z|A|10|B|C]|$9|11|A|12|B|C]]|D|@$9|13|A|14|1|15]|$9|16|A|17|1|18]|$9|19|A|1A|1|1B]]|E|$]]|$1|F|3|G|5|H|7|1C|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|1D|8|@]|D|@]|E|$]]]|L|$M|$5|N|O|P|E|$Q|R]]|S|$5|N|O|P|E|$Q|T]]|U|$5|N|O|P|E|$Q|V]]]]

<p>See the <a href="http://nodejs.org/api/crypto.html#crypto_crypto_createhash_algorithm" rel="noreferrer"><code>crypto.createHash()</code> function</a> and the associated <a href="http://nodejs.org/api/crypto.html#crypto_hash_update_data_input_encoding" rel="noreferrer"><code>hash.update()</code></a> and <a href="http://nodejs.org/api/crypto.html#crypto_hash_digest_encoding" rel="noreferrer"><code>hash.digest()</code></a> functions:</p>

<pre class="lang-js prettyprint-override"><code>var crypto = require('crypto')
var shasum = crypto.createHash('sha1')
shasum.update('foo')
shasum.digest('hex') // =&gt; "0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33"
</code></pre>


blocks|key|3160401|text|请阅读并认真考虑我在你的帖子评论中的建议。话虽如此，如果你仍然有很好的理由这样做，请查看this+list+of+crypto+modules+for+Node。它有处理sha1和base64的模块。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|3160402|entityMap|0|LINK|mutability|MUTABLE|url|https://github.com/joyent/node/wiki/modules#wiki-security^0|18|10|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

<p>Please read and strongly consider my advice in the comments of your post. That being said, if you still have a good reason to do this, check out <a href="https://github.com/joyent/node/wiki/modules#wiki-security" rel="nofollow noreferrer">this list of crypto modules for Node</a>. It has modules for dealing with both sha1 and base64.</p>


blocks|key|258583|text|必修课:+SHA1+is+，you+can+compute+SHA1+collisions+for+45,000+USD。您应该使用sha256：|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|258584|var+getSHA256ofJSON+=+function(input){
++++return+crypto.createHash('sha256').update(JSON.stringify(input)).digest('hex')
}|code-block|syntax|javascript|258585|要回答您的问题并生成SHA1散列：|258586|const+INSECURE_ALGORITHM+=+'sha1'
var+getInsecureSHA1ofJSON+=+function(input){
++++return+crypto.createHash(INSECURE_ALGORITHM).update(JSON.stringify(input)).digest('hex')
}|258587|然后：|258588|getSHA256ofJSON('whatever')|258589|或|258590|getSHA256ofJSON(['whatever'])|258591|258592|getSHA256ofJSON({'this':'too'})|258593|Official+node+docs+on+crypto.createHash()|258594|entityMap|0|LINK|mutability|MUTABLE|url|https://eprint.iacr.org/2020/014.pdf|1|https://nodejs.org/api/crypto.html#crypto_crypto_createhash_algorithm_options^0|1U|6|M|12|0|0|0|0|0|0|0|0|0|0|0|M|J|0|15|1|0^^$0|@$1|2|3|4|5|6|7|1B|8|@$9|1C|A|1D|B|C]]|D|@$9|1E|A|1F|1|1G]]|E|$]]|$1|F|3|G|5|H|7|1H|8|@]|D|@]|E|$I|J]]|$1|K|3|L|5|6|7|1I|8|@]|D|@]|E|$]]|$1|M|3|N|5|H|7|1J|8|@]|D|@]|E|$I|J]]|$1|O|3|P|5|6|7|1K|8|@]|D|@]|E|$]]|$1|Q|3|R|5|H|7|1L|8|@]|D|@]|E|$I|J]]|$1|S|3|T|5|6|7|1M|8|@]|D|@]|E|$]]|$1|U|3|V|5|H|7|1N|8|@]|D|@]|E|$I|J]]|$1|W|3|T|5|6|7|1O|8|@]|D|@]|E|$]]|$1|X|3|Y|5|H|7|1P|8|@]|D|@]|E|$I|J]]|$1|Z|3|10|5|6|7|1Q|8|@$9|1R|A|1S|B|C]]|D|@$9|1T|A|1U|1|1V]]|E|$]]|$1|11|3|-4|5|6|7|1W|8|@]|D|@]|E|$]]]|12|$13|$5|14|15|16|E|$17|18]]|19|$5|14|15|16|E|$17|1A]]]]

<p><strong>Obligatory: SHA1 is broken</strong>, you can <a href="https://eprint.iacr.org/2020/014.pdf" rel="noreferrer">compute SHA1 collisions for 45,000 USD</a>. You should use <code>sha256</code>: </p>

<pre><code>var getSHA256ofJSON = function(input){
    return crypto.createHash('sha256').update(JSON.stringify(input)).digest('hex')
}
</code></pre>

<p>To answer your question and make a SHA1 hash:</p>

<pre><code>const INSECURE_ALGORITHM = 'sha1'
var getInsecureSHA1ofJSON = function(input){
    return crypto.createHash(INSECURE_ALGORITHM).update(JSON.stringify(input)).digest('hex')
}
</code></pre>

<p>Then:</p>

<pre><code>getSHA256ofJSON('whatever')
</code></pre>

<p>or </p>

<pre><code>getSHA256ofJSON(['whatever'])
</code></pre>

<p>or</p>

<pre><code>getSHA256ofJSON({'this':'too'})
</code></pre>

<p><a href="https://nodejs.org/api/crypto.html#crypto_crypto_createhash_algorithm_options" rel="noreferrer">Official node docs on <code>crypto.createHash()</code></a></p>


blocks|key|2946486|text|预防问题的提示(错误的哈希)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|2946487|我曾体验过NodeJS对字符串的|2946488|+-8表示进行哈希处理。其他语言(如Python、PHP或PERL...)正在对字节串进行哈希处理。|blockquote|2946489|2946490|2946491|我们可以添加二进制参数来使用字节字符串。|2946492|const+crypto+=+require("crypto");

function+sha1(data)+{
++++return+crypto.createHash("sha1").update(data,+"binary").digest("hex");
}

sha1("Your+text+;)");|code-block|syntax|javascript|2946493|您可以尝试："\xac"，"\xd1"，"\xb9"，"\xe2"，"\xbb"，"\x93“等...|2946494|其他语言(Python、PHP等)：|2946495|sha1("\xac")+//39527c59247a39d18ad48b9947ea738396a3bc47|2946496|Nodejs：|2946497|sha1+=+crypto.createHash("sha1").update("\xac",+"binary").digest("hex")+//39527c59247a39d18ad48b9947ea738396a3bc47
//without:
sha1+=+crypto.createHash("sha1").update("\xac").digest("hex")+//f50eb35d94f1d75480496e54f4b4a472a9148752|2946498|entityMap^0|0|0|0|0|0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|11|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|12|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|13|8|@]|9|@]|A|$]]|$1|G|3|-4|5|6|7|14|8|@]|9|@]|A|$]]|$1|H|3|-4|5|6|7|15|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|16|8|@]|9|@]|A|$]]|$1|K|3|L|5|M|7|17|8|@]|9|@]|A|$N|O]]|$1|P|3|Q|5|6|7|18|8|@]|9|@]|A|$]]|$1|R|3|S|5|6|7|19|8|@]|9|@]|A|$]]|$1|T|3|U|5|M|7|1A|8|@]|9|@]|A|$N|O]]|$1|V|3|W|5|6|7|1B|8|@]|9|@]|A|$]]|$1|X|3|Y|5|M|7|1C|8|@]|9|@]|A|$N|O]]|$1|Z|3|-4|5|6|7|1D|8|@]|9|@]|A|$]]]|10|$]]

<h1>Tips to prevent issue (bad hash) :</h1>
<blockquote>
<p>I experienced that NodeJS is hashing the UTF-8 representation of the string. Other languages (like Python, PHP or PERL...) are hashing the byte string.</p>
</blockquote>
<p>We can add <em>binary</em> argument to use the byte string.</p>
<pre><code>const crypto = require(&quot;crypto&quot;);

function sha1(data) {
    return crypto.createHash(&quot;sha1&quot;).update(data, &quot;binary&quot;).digest(&quot;hex&quot;);
}

sha1(&quot;Your text ;)&quot;);
</code></pre>
<p>You can try with : &quot;\xac&quot;, &quot;\xd1&quot;, &quot;\xb9&quot;, &quot;\xe2&quot;, &quot;\xbb&quot;, &quot;\x93&quot;, etc...</p>
<h3>Other languages (Python, PHP, ...):</h3>
<pre><code>sha1(&quot;\xac&quot;) //39527c59247a39d18ad48b9947ea738396a3bc47
</code></pre>
<h3>Nodejs:</h3>
<pre><code>sha1 = crypto.createHash(&quot;sha1&quot;).update(&quot;\xac&quot;, &quot;binary&quot;).digest(&quot;hex&quot;) //39527c59247a39d18ad48b9947ea738396a3bc47
//without:
sha1 = crypto.createHash(&quot;sha1&quot;).update(&quot;\xac&quot;).digest(&quot;hex&quot;) //f50eb35d94f1d75480496e54f4b4a472a9148752
</code></pre>


blocks|key|3160476|text|您可以使用：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|3160477|++const+sha1+=+require('sha1');
++const+crypt+=+sha1('Text');
++console.log(crypt);|code-block|syntax|javascript|3160478|对于安装：|3160479|++sudo+npm+install+-g+sha1
++npm+install+sha1+--save|3160480|entityMap^0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|M|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|N|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|O|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|P|8|@]|9|@]|A|$E|F]]|$1|K|3|-4|5|6|7|Q|8|@]|9|@]|A|$]]]|L|$]]

<p>You can use:</p>

<pre><code>  const sha1 = require('sha1');
  const crypt = sha1('Text');
  console.log(crypt);
</code></pre>

<p>For install:</p>

<pre><code>  sudo npm install -g sha1
  npm install sha1 --save
</code></pre>


blocks|key|260437|text|答案使用新的浏览器兼容，在节点v15中添加了零依赖SubtleCrypto+API|type|unstyled|depth|inlineStyleRanges|entityRanges|data|260438|​|260439|const+crypto+=+this.crypto+%7C%7C+require('crypto').webcrypto;

const+sha1sum+=+async+(message)+=>+{
++const+encoder+=+new+TextEncoder()
++const+data+=+encoder.encode(message)
++const+hashBuffer+=+await+crypto.subtle.digest('SHA-1',+data)
++const+hashArray+=+Array.from(new+Uint8Array(hashBuffer));+++++++++++++++++++++//+convert+buffer+to+byte+array
++const+hashHex+=+hashArray.map(b+=>+b.toString(16).padStart(2,+'0')).join('');+//+convert+bytes+to+hex+string
++return+hashHex;
}

sha1sum('foo')
++.then(digestHex+=>+console.log(digestHex))

//+"0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33"|code-block|syntax|javascript|260440|260441|节点沙盒：https://runkit.com/hesygolu/61564dbee2ec8600082a884d|offset|length|260442|资料来源：|260443|260444|https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest#converting_a_digest_to_a_hex_string|unordered-list-item|260445|https://nodejs.org/api/webcrypto.html#webcrypto_class_subtlecrypto|260446|260447|entityMap|0|LINK|mutability|MUTABLE|url|https://runkit.com/hesygolu/61564dbee2ec8600082a884d|1|2^0|0|0|0|0|5|1G|0|0|0|0|0|2W|1|0|0|1U|2|0|0^^$0|@$1|2|3|4|5|6|7|16|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|17|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|18|8|@]|9|@]|A|$G|H]]|$1|I|3|C|5|6|7|19|8|@]|9|@]|A|$]]|$1|J|3|K|5|6|7|1A|8|@]|9|@$L|1B|M|1C|1|1D]]|A|$]]|$1|N|3|O|5|6|7|1E|8|@]|9|@]|A|$]]|$1|P|3|-4|5|6|7|1F|8|@]|9|@]|A|$]]|$1|Q|3|R|5|S|7|1G|8|@]|9|@$L|1H|M|1I|1|1J]]|A|$]]|$1|T|3|U|5|S|7|1K|8|@]|9|@$L|1L|M|1M|1|1N]]|A|$]]|$1|V|3|-4|5|6|7|1O|8|@]|9|@]|A|$]]|$1|W|3|-4|5|6|7|1P|8|@]|9|@]|A|$]]]|X|$Y|$5|Z|10|11|A|$12|13]]|14|$5|Z|10|11|A|$12|R]]|15|$5|Z|10|11|A|$12|U]]]]

<p>Answer using the new browser compatible, zero dependency SubtleCrypto API added in Node v15</p>
<p><div class="snippet" data-lang="js" data-hide="false" data-console="true" data-babel="false">
<div class="snippet-code">
<pre class="snippet-code-js lang-js prettyprint-override"><code>const crypto = this.crypto || require('crypto').webcrypto;

const sha1sum = async (message) =&gt; {
  const encoder = new TextEncoder()
  const data = encoder.encode(message)
  const hashBuffer = await crypto.subtle.digest('SHA-1', data)
  const hashArray = Array.from(new Uint8Array(hashBuffer));                     // convert buffer to byte array
  const hashHex = hashArray.map(b =&gt; b.toString(16).padStart(2, '0')).join(''); // convert bytes to hex string
  return hashHex;
}

sha1sum('foo')
  .then(digestHex =&gt; console.log(digestHex))

// "0beec7b5ea3f0fdbc95d0dd47f3c5bc275da8a33"</code></pre>
</div>
</div>
</p>
<p>Node Sandbox: <a href="https://runkit.com/hesygolu/61564dbee2ec8600082a884d" rel="nofollow noreferrer">https://runkit.com/hesygolu/61564dbee2ec8600082a884d</a></p>
<p>Sources:</p>
<ul>
<li><a href="https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest#converting_a_digest_to_a_hex_string" rel="nofollow noreferrer">https://developer.mozilla.org/en-US/docs/Web/API/SubtleCrypto/digest#converting_a_digest_to_a_hex_string</a></li>
<li><a href="https://nodejs.org/api/webcrypto.html#webcrypto_class_subtlecrypto" rel="nofollow noreferrer">https://nodejs.org/api/webcrypto.html#webcrypto_class_subtlecrypto</a></li>
</ul>


<p>I'm trying to create a websocket server written in node.js</p>
<p>To get the server to work I need to get the SHA1 hash of a string.</p>
<p>What I have to do is explained in <a href="https://datatracker.ietf.org/doc/html/draft-ietf-hybi-thewebsocketprotocol-10#page-36" rel="nofollow noreferrer">Section 5.2.2 page 35 of the docs</a>.</p>
<blockquote>
<p>NOTE: As an example, if the value of the <code>&quot;Sec-WebSocket-Key&quot;</code>
header in the client's handshake were <code>&quot;dGhlIHNhbXBsZSBub25jZQ==&quot;</code>, the server would append thestring <code>&quot;258EAFA5-E914-47DA-95CA-C5AB0DC85B11&quot;</code> to form the
string <code>&quot;dGhlIHNhbXBsZSBub25jZQ==258EAFA5-E914-47DA-95CA-C5AB0DC85B11&quot;</code>.  The server would then take the SHA-1 hash of this string, giving the value 0xb3 0x7a 0x4f 0x2c 0xc0 0x62 0x4f 0x16 0x90 0xf6 0x46 0x06 0xcf 0x38 0x59 0x45 0xb2 0xbe 0xc4 0xea.  This value is then base64-encoded, to give the value <code>&quot;s3pPLMBiTxaQ9kYGzzhZRbK+xOo=&quot;</code>, which would be returned
in the <code>&quot;Sec-WebSocket-Accept&quot;</code> header.</p>
</blockquote>


How can I get the sha1 hash of a string in node.js?

服务器

Python

JSON

我正在尝试创建一个用node.js编写的websocket服务器要让服务器正常工作，我需要获取字符串的SHA1散列。我要做的事情在中有解释。注意:例如，如果客户端握手中的"Sec-WebSocket-Key"标头的值为"dGhlIHNhbXBsZSBub25jZQ=="，则服务器将附加字符串"258EAFA5-E914...

问如何在node.js中获取字符串的sha1散列？
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在node.js中获取字符串的sha1散列？EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何在node.js中获取字符串的sha1散列？
EN