86 lines
2.8 KiB
Java
86 lines
2.8 KiB
Java
package com.cdzy.common.utils;
|
||
|
||
import java.nio.charset.StandardCharsets;
|
||
import java.security.MessageDigest;
|
||
import java.security.SecureRandom;
|
||
import java.util.Base64;
|
||
import java.util.HexFormat;
|
||
|
||
/**
|
||
* SHA-256 加盐加密工具类
|
||
*/
|
||
public class SHA256WithSaltUtil {
|
||
|
||
private static final int SALT_LENGTH = 16; // 盐值长度（16字节 = 128位）
|
||
private static final String ALGORITHM = "SHA-256";
|
||
private static final HexFormat HEX_FORMAT = HexFormat.of();
|
||
|
||
/**
|
||
* 生成随机盐值
|
||
*/
|
||
public static String generateSalt() {
|
||
SecureRandom random = new SecureRandom();
|
||
byte[] salt = new byte[SALT_LENGTH];
|
||
random.nextBytes(salt);
|
||
return Base64.getEncoder().encodeToString(salt);
|
||
}
|
||
|
||
/**
|
||
* 加密密码（SHA-256 + 盐值）
|
||
* @param password 原始密码
|
||
* @param salt 盐值（如果为null则自动生成）
|
||
* @return 返回加密后的密码和盐值组合字符串（格式：密文:盐值）
|
||
*/
|
||
public static String encrypt(String password, String salt) {
|
||
try {
|
||
// 如果未提供盐值，则生成新盐值
|
||
String usedSalt = (salt == null) ? generateSalt() : salt;
|
||
|
||
MessageDigest md = MessageDigest.getInstance(ALGORITHM);
|
||
md.update(Base64.getDecoder().decode(usedSalt)); // 加入盐值
|
||
byte[] hash = md.digest(password.getBytes(StandardCharsets.UTF_8));
|
||
|
||
// 返回格式：HEX(哈希值):Base64(盐值)
|
||
return HEX_FORMAT.formatHex(hash) + ":" + usedSalt;
|
||
} catch (Exception e) {
|
||
throw new RuntimeException("密码加密失败", e);
|
||
}
|
||
}
|
||
|
||
/**
|
||
* 验证密码
|
||
* @param inputPassword 用户输入的密码
|
||
* @param storedHash 数据库存储的加密字符串（格式：密文:盐值）
|
||
* @return 是否匹配
|
||
*/
|
||
public static boolean verify(String inputPassword, String storedHash) {
|
||
if (inputPassword == null || storedHash == null) {
|
||
return false;
|
||
}
|
||
|
||
String[] parts = storedHash.split(":");
|
||
if (parts.length != 2) {
|
||
throw new IllegalArgumentException("存储的密码格式无效");
|
||
}
|
||
|
||
String inputHash = encrypt(inputPassword, parts[1]);
|
||
return inputHash.equals(storedHash);
|
||
}
|
||
|
||
// 测试示例
|
||
public static void main(String[] args) {
|
||
String password = "admin123";
|
||
|
||
// 加密
|
||
String encrypted = encrypt(password, null);
|
||
System.out.println("加密结果: " + encrypted);
|
||
|
||
// 验证
|
||
boolean matched = verify(password, encrypted);
|
||
System.out.println("验证结果: " + matched);
|
||
|
||
// 错误密码测试
|
||
boolean wrongMatch = verify("wrongPassword", encrypted);
|
||
System.out.println("错误密码测试: " + wrongMatch);
|
||
}
|
||
} |