Java sha1 and PHP sha1

Question

Hello to everyone.
When encoding with PHP using sha1 i do not get the same result as Java's sha1 encoding.
For example encoding letter 'e' in PHP produces:
58e6b3a414a1e0[b]90dfc6029add0f3555ccba127f
whereas in Java it produces:
58e6b3a414a1e0[b]3fdfc6029add0f3555ccba127f
Below is the code i am using for both Java and PHP
String password=pass;
          java.security.MessageDigest d =null;
          try {
               d = java.security.MessageDigest.getInstance("SHA-1");
          } catch (NoSuchAlgorithmException e) {
               // TODO Auto-generated catch block
               e.printStackTrace();
          d.reset();
          d.update(password.getBytes());
          String secret = new String (d.digest());
          secret.getBytes();
          StringBuffer sb = new StringBuffer(secret.getBytes().length * 2);
        for (int i = 0; i < secret.getBytes().length; i++) {
             int b = secret.getBytes() & 0xFF;
sb.append(HEX_DIGITS.charAt(b >>> 4)).append(HEX_DIGITS.charAt(b & 0xF));
return sb.toString();     
PHP Code:
$str = 'e';
$str2=sha1($str2);
echo $str2;Anyone had similar problems and found a solution to them? I cannot see any mistake in the code so any help would be much appreciated.
P.S: I am running Java 1.4 and PHP 5.1.6 configuration
Kind Regards
Christophoros

Answer 1

Hi,
I found your reply regarding "Java sha1 and PHP sha1" on the forum and would like to ask another related question.
I use the following statement to insert username/password to the database:
INSERT INTO [db_Report].[dbo].[tblLogin]
([USERNAME]
,[PASSWORD])
VALUES
('test'
,HashBytes('MD5', 'password'))
GO
In my Java code, however, the following method always return false. I noticed that in the database
HashBytes('MD5', 'password') returns "0x5F4DCC3B5AA765D61D8327DEB882CF99"
while
The the encrypted login password is "[B@13d93f4" in the Java code.
In this case, how should I check the password, using MessageDigest or not ?
Many thanks.
===============
     {code}private static boolean authenticateUser(String username, String loginPassword){
          boolean authenticate = false;
          Connection con = getDatabaseConnection();
          if (con != null){
               StringBuffer select = new StringBuffer("");
               select.append("SELECT password from [db_MobileDetectorReport].[dbo].[tblUserLogin] where username = '"+username+"'");
               String strSelect = select.toString();
               try {
                    PreparedStatement ps=con.prepareStatement(strSelect, ResultSet.TYPE_FORWARD_ONLY, ResultSet.CONCUR_UPDATABLE);
                    ResultSet rsResult = ps.executeQuery();
                    byte[] passBytes = loginPassword.getBytes();                    
                    MessageDigest md = MessageDigest.getInstance("MD5");               
                    byte[] encryptedLoginPWD = md.digest(passBytes);
                    System.out.println("encryptedLoginPWD="+encryptedLoginPWD.toString());
                    if (rsResult.next()) {
                         byte[] databasePWD=rsResult.getBytes(1);
                         authenticate=MessageDigest.isEqual(encryptedLoginPWD,databasePWD);
               } catch (Exception e) {
                    //TBD
          } else {
               //TBD
          return authenticate;
     }{code}
Edited by: happy_coding on Dec 21, 2009 1:39 PM{code}{code}
Edited by: happy_coding on Dec 21, 2009 1:40 PM