Question

我试图将密码的哈希值存储到我的apps文件目录中的.txt文件中，但是所有似乎存储或读取的内容都是内存位置而不是实际的哈希值。

这是负责哈希密码的函数：

private void hashPassword(String pass)throws UnsupportedEncodingException, NoSuchAlgorithmException {
    //Hashed password is a global String
    hashedPassword = hasher.hash(pass);
}

这是上面调用的Hasher类方法，用于创建密码的SHA-256哈希：

public String hash(String text) throws UnsupportedEncodingException, NoSuchAlgorithmException {
    byte[] b = text.getBytes(StandardCharsets.UTF_8);
    MessageDigest digest = MessageDigest.getInstance("SHA-256");
    return new String(digest.digest(b));
}

这是我用来设置写入文件的函数：

//Set up a file in the directory path of the app and give it the name pass.txt and pubKey.txt
private void setUpFiles(String typeSetup) {
    //Check to see if it's setting up the pass file or key file
    if(typeSetup.equals("pass")){
        //passFile is a global file object object
        passFile = new File(makeId.this.getApplicationContext().getFilesDir(),"pass.txt");
    } else if (typeSetup.equals("key")){
        encryptionKeyFile = new File(makeId.this.getApplicationContext().getFilesDir(),"pubKey.txt");
    }
}

最后，这是处理存储传递的函数：

//Store the login info provided by the user
private boolean storeLogin() throws IOException {
    //Store the hashed password in a text file
    setUpFiles("pass");
    //Create objects to handle file writing
    FileWriter pw = new FileWriter(passFile);
    BufferedWriter bw = new BufferedWriter(pw);
    //Write the hashed password to the file
    bw.write(new String(hashedPassword));
    //Close resources
    bw.close();
    pw.close();
    //Return if the file was created or not
    return passFile.exists();
}

这些是将散列密码存储到文本文件中的函数，下面是另一个活动用来从文件中读取，存储和显示散列的函数。

    public void loadPassHash() throws FileNotFoundException {
    //File that should contain the hash of the password
    File passFile = new File(c.getFilesDir(),"pass.txt");
    //Create a textview object
    tv = (TextView) findViewById(R.id.viewer);
    //Create a scanner object to read the file
    Scanner myScan = new Scanner(passFile);
    //Initialize the text variable to store the contents of the file
    String text = null;
    //Loop the file and set the text to it
    while (myScan.hasNext()) {
        text=myScan.next();
    }
    //If there is something in the file
    if (text!=null) {
        //Set the global passHash string to the value of text
        passHash=text;
        //Display the hashed password for development 
        tv.setText(passHash);
        //Close the scanner
        myScan.close();
    } else {
        finish();
    }

}

结果是只显示了一个内存位置，我无法比较密码哈希并验证登录。任何帮助将不胜感激。

Answer 1

您想要从密码文件中逐行读取，目前您正在阅读直到空格。

while (myScan.hasNextLine()) {
    text=myScan.nextLine();
}

Android文件存储存储内存位置

1 个答案: