org.apache.shiro.crypto.hash.Hash Java Examples

private static Hash calculateHash(String password) {
    ByteSource privateSalt = ByteSource.Util.bytes(PRIVATE_SALT_BYTES);
    DefaultHashService hashService = new DefaultHashService();
    hashService.setPrivateSalt(privateSalt);
    hashService.setGeneratePublicSalt(true);
    hashService.setHashIterations(ITERATIONS);

    HashRequest.Builder builder = new HashRequest.Builder();
    builder.setSource(ByteSource.Util.bytes(password));

    Hash hash = hashService.computeHash(builder.build());

    log.info("Hash algorithm {}, iterations {}, public salt {}", hash.getAlgorithmName(), hash.getIterations(), hash.getSalt());

    return hash;
}
 

private static boolean verifyPassword(byte[] originalHash, ByteSource publicSalt, String password) {
    ByteSource privateSalt = ByteSource.Util.bytes(PRIVATE_SALT_BYTES);
    DefaultHashService hashService = new DefaultHashService();
    hashService.setPrivateSalt(privateSalt);
    hashService.setHashIterations(ITERATIONS);

    HashRequest.Builder builder = new HashRequest.Builder();
    builder.setSource(ByteSource.Util.bytes(password));
    builder.setSalt(publicSalt);

    Hash comparisonHash = hashService.computeHash(builder.build());

    log.info("password: {}", password);
    log.info("1 hash: {}", Hex.encodeToString(originalHash));
    log.info("2 hash: {}", comparisonHash.toHex());

    return Arrays.equals(originalHash, comparisonHash.getBytes());
}
 

public boolean equals(Object o) {
    if (o instanceof Hash) {
        Hash other = (Hash)o;
        return MessageDigest.isEqual(this.getBytes(), other.getBytes());
    } else {
        return false;
    }
}
 

@Test
public void testHash() {
  String password = "testpassword";
  Hash hash = underTest.hashPassword(password);

  assertThat(underTest.passwordsMatch(password, hash), is(true));
}
 

@Override
protected AuthenticationInfo createAuthenticationInfo(AuthenticationToken token,
    Object ldapPrincipal, Object ldapCredentials, LdapContext ldapContext)
    throws NamingException {
  HashRequest.Builder builder = new HashRequest.Builder();
  Hash credentialsHash = hashService
      .computeHash(builder.setSource(token.getCredentials())
          .setAlgorithmName(HASHING_ALGORITHM).build());
  return new SimpleAuthenticationInfo(token.getPrincipal(),
      credentialsHash.toHex(), credentialsHash.getSalt(),
      getName());
}
 

public static void main(String[] args) {
    String password = "SHA-512 hash sample text";

    Hash hash = calculateHash(password);
    boolean correct = verifyPassword(hash.getBytes(), hash.getSalt(), password);

    log.info("Entered password is correct: {}", correct);
}
 

@Transient
@Override
public ByteSource getCredentialsSalt() {
    return Hash.Util.bytes(passwordSalt);
}
 

public static String getHashedPassword(String password, String salt) {
    Hash hash = new SimpleHash(hashAlgorithm, password, salt);
    return hash.toHex();
}
 

public Hash hashProvidedCredentials(Object credentials, Object salt) {
	return ((RetryLimitMd5CredentialsMatcher) getCredentialsMatcher()).hashProvidedCredentials(credentials, salt);
}
 

public Hash hashProvidedCredentials(Object credentials, Object salt) {
	return super.hashProvidedCredentials(credentials, salt, getHashIterations());
}
 

@Override
public Hash hashPassword(final Object plaintext) {
  return passwordService.hashPassword(plaintext);
}
 

@Override
public boolean passwordsMatch(final Object plaintext, final Hash savedPasswordHash) {
  return passwordService.passwordsMatch(plaintext, savedPasswordHash);
}
 

@Test
public void test0() throws UnsupportedEncodingException {
	/** 加密类型(不区分大小写)、密码、私匙、加密次数 */
	Hash hash = new SimpleHash("MD5", "123456", "Nano Framework Extension Shiro Salt for user: [admin]", 2);
	LOG.debug(hash.toString());
}
 

@Override
protected AuthenticationInfo createAuthenticationInfo(AuthenticationToken token, Object ldapPrincipal, Object ldapCredentials, LdapContext ldapContext) throws NamingException {
  HashRequest.Builder builder = new HashRequest.Builder();
  Hash credentialsHash = hashService.computeHash(builder.setSource(token.getCredentials()).setAlgorithmName(HASHING_ALGORITHM).build());
  return new SimpleAuthenticationInfo(token.getPrincipal(), credentialsHash.toHex(), credentialsHash.getSalt(), getName());
}
 

Hash hashing(String algorithm, ByteSource source, ByteSource salt, int hashIterations);