Java应用程序中的密码散列

我有一个用Java编写的Android应用程序，它使用SQLite数据库。 我希望在注册页面上输入密码后生成MD5或SHA1散列，该散列存储在数据库中。然后可以在登录回应用程序时使用

有人能帮忙吗

报名

package com.example.oliver.beckettreg;

import android.app.Activity;
import android.content.Intent;
import android.os.Bundle;
import android.view.View;
import android.widget.EditText;
import android.widget.Toast;

public class SignUp extends Activity {

DatabaseHelper helper = new DatabaseHelper(this);
@Override
protected void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);
    setContentView(R.layout.signup);
}

//if button clicked
public void onSignUpClick(View v) {
    if (v.getId() == R.id.Bsignupbutton) {


        EditText name = (EditText) findViewById(R.id.TFname);
        EditText email = (EditText) findViewById(R.id.TFemail);
        EditText uname = (EditText) findViewById(R.id.TFuname);
        EditText pass1 = (EditText) findViewById(R.id.TFpass1);
        EditText pass2 = (EditText) findViewById(R.id.TFpass2);


        String namestr = name.getText().toString();
        String emailstr = email.getText().toString();
        String unamestr = uname.getText().toString();
        String pass1str = pass1.getText().toString();
        String pass2str = pass2.getText().toString();

        //check passwords match
        if(!pass1str.equals(pass2str))


        {
            //popup msg if fails
            Toast pass = Toast.makeText(SignUp.this , "Passwords don't match!" , Toast.LENGTH_SHORT);
            pass.show();


        }
        else
        {

            //validations for data input
            if (name.getText().toString().length() == 0)
            {name.setError("Name Required");}

            else if (!email.getText().toString().matches("[a-z]{1}\\.[a-z]*[0-9]{4}@student\\.leedsbeckett\\.ac\\.uk"))
            {email.setError("Incorrect Email Format");}

            else if (!uname.getText().toString().matches("[cC][0-9]{7}"))
            {uname.setError("Incorrect ID Format");}

            else if (!pass1.getText().toString().matches("(?=.*[\\d])(?=.*[a-z])(?=.*[A-Z]).{8,}"))
            {pass1.setError("Incorrect Password Format");}

            else{
                //insert the details in database
                Contact c = new Contact();
                c.setName(namestr);
                c.setEmail(emailstr);
                c.setUname(unamestr);
                c.setPass(pass1str);

                helper.insertContact(c);


                //popup if data passes validations
                Toast pass = Toast.makeText(SignUp.this , "User Registered" , Toast.LENGTH_LONG);
                pass.show();

            }

        }

    }


}


public void onButtonClick(View v) {

    if (v.getId() == R.id.Blogin2) {
        Intent i = new Intent(SignUp.this, com.example.oliver.beckettreg.MainActivity.class);
        startActivity(i);

    }




}
}

登录

}

数据库助手

import android.content.ContentValues;
import android.content.Context;
import android.database.Cursor;
import android.database.sqlite.SQLiteDatabase;
import android.database.sqlite.SQLiteOpenHelper;
import android.provider.ContactsContract;



 public class
   DatabaseHelper extends SQLiteOpenHelper {

//Database Version
private static final int DATABASE_VERSION = 1;

//Database Name
private static final String DATABASE_NAME = "contacts.db";

//Table Names
private static final String REGISTER_TABLE_NAME = "register";
private static final String CONTACTS_TABLE_NAME = "contacts";

//Contacts Column Names
private static final String CONTACTS_COLUMN_ID = "id";
private static final String CONTACTS_COLUMN_NAME = "name";
private static final String CONTACTS_COLUMN_EMAIL = "email";
private static final String CONTACTS_COLUMN_UNAME = "uname";
private static final String CONTACTS_COLUMN_PASS = "pass";

//Register Column Names
private static final String REGISTER_COLUMN_ID = "id";
private static final String REGISTER_COLUMN_SEMINAR = "seminar";
private static final String REGISTER_COLUMN_LECTURE = "lecture";

SQLiteDatabase db;

//Table Create Statements
private static final String CONTACTS_TABLE_CREATE = "create table contacts (id                                   integer primary key not null , " +
    "name text not null , email text not null , uname text not null , pass text not null);";

private static final String REGISTER_TABLE_CREATE =  "create table register         (id integer primary key not null , " +
    " time DATETIME DEFAULT CURRENT_TIMESTAMP, seminar text not null , lecture text not null,  );";

public DatabaseHelper(Context context) {
super(context, DATABASE_NAME, null, DATABASE_VERSION);
}

//Creating Required Tables
@Override
public void onCreate(SQLiteDatabase db) {
db.execSQL(REGISTER_TABLE_CREATE);
db.execSQL(CONTACTS_TABLE_CREATE);
this.db = db;
}

public void insertContact(Contact c) {
db = this.getWritableDatabase();
ContentValues values = new ContentValues();

String query = "select * from contacts";
Cursor cursor = db.rawQuery(query , null);
int count = cursor.getCount();

values.put(CONTACTS_COLUMN_ID, count);
values.put(CONTACTS_COLUMN_NAME, c.getName());
values.put(CONTACTS_COLUMN_EMAIL, c.getEmail());
values.put(CONTACTS_COLUMN_UNAME, c.getUname());
values.put(CONTACTS_COLUMN_PASS, c.getPass());

db.insert(CONTACTS_TABLE_NAME, null, values);
db.close();


}

public void insertRegister(Register r) {
db = this.getWritableDatabase();
ContentValues values = new ContentValues();

String query = "select * from register";
Cursor cursor = db.rawQuery(query, null);
int count = cursor.getCount();

values.put(REGISTER_COLUMN_ID, count);
values.put(REGISTER_COLUMN_SEMINAR, r.getSeminar());
values.put(REGISTER_COLUMN_LECTURE, r.getLecture());

db.insert(REGISTER_TABLE_NAME, null, values);
db.close();

}


public String searchPass(String uname)
{
db = this.getReadableDatabase();
String query = "select uname, pass from "+CONTACTS_TABLE_NAME;
Cursor cursor = db.rawQuery(query , null);
String a, b;
b = "not found";
if(cursor.moveToFirst())
{
    do{
        a = cursor.getString(0);

        if(a.equals(uname))
        {
            b = cursor.getString(1);
            break;
        }
    }
    while(cursor.moveToNext());
    }

return b;
}


    //On Upgrade Drop Older Tables
@Override
public void onUpgrade(SQLiteDatabase db, int oldVersion, int newVersion) {
    db.execSQL("DROP TABLE IF EXISTS " + REGISTER_TABLE_NAME);
db.execSQL("DROP TABLE IF EXISTS " + CONTACTS_TABLE_NAME);

//Create New Tables
this.onCreate(db);

}

}

---

您可以实现此方法，它将以字符串形式返回哈希

private String hashMe(String password) {

    try {
        MessageDigest md = MessageDigest.getInstance("SHA-1"); //could also be MD5, SHA-256 etc.
        md.reset();
        md.update(password.getBytes("UTF-8"));
        byte[] resultByte = md.digest();
        password = String.format("%01x", new java.math.BigInteger(1, resultByte));

    } catch (NoSuchAlgorithmException e) {
        //do something.
    } catch (UnsupportedEncodingException ex) {
        //do something
    }
    return password;
}

---

由于您处理的是密码，因此还应该对哈希进行加密，并将其保存在数据库中。

您可以实现此方法，该方法将哈希作为字符串返回

private String hashMe(String password) {

    try {
        MessageDigest md = MessageDigest.getInstance("SHA-1"); //could also be MD5, SHA-256 etc.
        md.reset();
        md.update(password.getBytes("UTF-8"));
        byte[] resultByte = md.digest();
        password = String.format("%01x", new java.math.BigInteger(1, resultByte));

    } catch (NoSuchAlgorithmException e) {
        //do something.
    } catch (UnsupportedEncodingException ex) {
        //do something
    }
    return password;
}

---

由于您处理的是密码，您还应该在散列中添加盐，并将它们都保存在数据库中。

谢谢，先生，在哪一类中？两者都有@我不知道如何在我的应用程序中实现这一点，你能提供进一步的帮助吗@绝对正确！用户注册和登录时都需要此方法，因为登录将比较哈希，而注册将保存哈希。因为我还没有看到你的整个项目，所以很难说把它放在哪里。也许是数据库助手？（因为它在你的两个类中都有使用。）我仍然在努力，所以我已经发布了database helper，如果这有助于@etterfresi，如果你将它放在DatabaseHelper中，你可以这样使用它：values.put（CONTACTS_COLUMN_PASS，hashMe（c.getPass（））；谢谢，先生，哪一班？两者都有@我不知道如何在我的应用程序中实现这一点，你能提供进一步的帮助吗@绝对正确！用户注册和登录时都需要此方法，因为登录将比较哈希，而注册将保存哈希。因为我还没有看到你的整个项目，所以很难说把它放在哪里。也许是数据库助手？（因为它在你的两个类中都有使用。）我仍然在努力，所以我已经发布了database helper，如果这有助于@etterfresi，如果你将它放在DatabaseHelper中，你可以这样使用它：values.put（CONTACTS_COLUMN_PASS，hashMe（c.getPass（））；