【发布时间】:2016-12-08 19:50:00
【问题描述】:
我正在尝试将密码的哈希值存储到我的应用程序文件目录中的 .txt 文件中,但是似乎被存储或读取的只是内存位置而不是实际的哈希值。
这是处理密码散列的函数:
private void hashPassword(String pass)throws UnsupportedEncodingException, NoSuchAlgorithmException {
//Hashed password is a global String
hashedPassword = hasher.hash(pass);
}
这是上面调用的 Hasher 类方法,用于创建密码的 SHA-256 哈希:
public String hash(String text) throws UnsupportedEncodingException, NoSuchAlgorithmException {
byte[] b = text.getBytes(StandardCharsets.UTF_8);
MessageDigest digest = MessageDigest.getInstance("SHA-256");
return new String(digest.digest(b));
}
这是我用来设置要写入的文件的函数:
//Set up a file in the directory path of the app and give it the name pass.txt and pubKey.txt
private void setUpFiles(String typeSetup) {
//Check to see if it's setting up the pass file or key file
if(typeSetup.equals("pass")){
//passFile is a global file object object
passFile = new File(makeId.this.getApplicationContext().getFilesDir(),"pass.txt");
} else if (typeSetup.equals("key")){
encryptionKeyFile = new File(makeId.this.getApplicationContext().getFilesDir(),"pubKey.txt");
}
}
最后,这是处理存储通行证的函数:
//Store the login info provided by the user
private boolean storeLogin() throws IOException {
//Store the hashed password in a text file
setUpFiles("pass");
//Create objects to handle file writing
FileWriter pw = new FileWriter(passFile);
BufferedWriter bw = new BufferedWriter(pw);
//Write the hashed password to the file
bw.write(new String(hashedPassword));
//Close resources
bw.close();
pw.close();
//Return if the file was created or not
return passFile.exists();
}
这些是将散列密码存储到文本文件中的函数,下面是另一个活动用来从文件中读取、存储和显示散列的函数。
public void loadPassHash() throws FileNotFoundException {
//File that should contain the hash of the password
File passFile = new File(c.getFilesDir(),"pass.txt");
//Create a textview object
tv = (TextView) findViewById(R.id.viewer);
//Create a scanner object to read the file
Scanner myScan = new Scanner(passFile);
//Initialize the text variable to store the contents of the file
String text = null;
//Loop the file and set the text to it
while (myScan.hasNext()) {
text=myScan.next();
}
//If there is something in the file
if (text!=null) {
//Set the global passHash string to the value of text
passHash=text;
//Display the hashed password for development
tv.setText(passHash);
//Close the scanner
myScan.close();
} else {
finish();
}
}
这样做的结果是只显示一个内存位置,我无法比较密码哈希并验证登录。任何帮助将不胜感激。
【问题讨论】:
-
请您向我们展示您在文本框和文件内容中看到的内容。
-
我已将您的 hash() 函数放入单元测试中,它似乎做了一些有意义的事情。
-
text=myScan.next();。你正在抛弃前者。把它们加起来。text+=myScan.next();。用 "" 而不是 null 来初始化文本。
标签: java android file hash storage