Question

我正在开发一个使用RESTful服务与服务器通信的Android应用程序。对于登录，我使用CHAP方法。

在机器一（Win7 32位）登录工作
在机器二（Win7 64位）上登录不起作用

以下是我使用的代码：

Serverside（C＃）：

public string AuthenticateByPassword(string authUserName, long crcvalue)
    {
        if (!CHAPUtil.CheckAuth(authUserName, crcvalue))
            throw new PermissionDeniedException();

        return masterdata.AuthenticateByPassword(authUserName, CHAPUtil.getPasswordByUsername(authUserName));
    }

public long getAuthentificationChallenge(string username)
    {
        long challenge = CHAPUtil.getChallenge();
        CHAPUtil.CalculateHash(username, challenge);
        return challenge;
    }

public class CHAPUtil
{
    private static Hashtable crcValues = new Hashtable();

    public static long getChallenge()
    {
        Random r = new Random();
        return r.Next();
    }

    public static void CalculateHash(string username, long random)
    {
        Crc32 crc = new Crc32();
        long crcResult = crc.ComputeChecksum(StringToByteArray(getPasswordByUsername(username)));

        if (crcValues.Contains(username))
        {
            crcValues.Remove(username);
        }

        crcValues.Add(username, crcResult * random);
    }

    public static bool CheckAuth(string username, long hashvalue)
    {
        if (crcValues.Contains(username))
        {
            long value = (long)crcValues[username];
            if (value == hashvalue)
            {
                crcValues.Remove(username);
                return true;
            }
        }
        return false;
    }

    public static string getPasswordByUsername(string username)
    {            
    }

    private static byte[] StringToByteArray(string str)
    {
        System.Text.ASCIIEncoding enc = new System.Text.ASCIIEncoding();
        return enc.GetBytes(str);
    }
}

public class Crc32
{
    uint[] table;

    public long ComputeChecksum(byte[] bytes)
    {
        uint crc = 0xffffffff;
        for (int i = 0; i < bytes.Length; ++i)
        {
            byte index = (byte)(((crc) & 0xff) ^ bytes[i]);
            crc = (uint)((crc >> 8) ^ table[index]);
        }
        return ~crc;
    }

    public byte[] ComputeChecksumBytes(byte[] bytes)
    {
        return BitConverter.GetBytes(ComputeChecksum(bytes));
    }

    public Crc32()
    {
        uint poly = 0xedb88320;
        table = new uint[256];
        uint temp = 0;
        for (uint i = 0; i < table.Length; ++i)
        {
            temp = i;
            for (int j = 8; j > 0; --j)
            {
                if ((temp & 1) == 1)
                {
                    temp = (uint)((temp >> 1) ^ poly);
                }
                else
                {
                    temp >>= 1;
                }
            }
            table[i] = temp;
        }
    }
}

Clientside（Java / Android）

private static String login(String username, String passwd) {

    //Challenge handshake authentification
    //1st step - get authentification challenge (random long)
    long challenge = MasterdataServices.getAuthentificationChallenge(username);
    if(challenge == 0 || challenge == -1) {
        return null;
    }

    //get hashed password
    String hashedPassword = getHashedPassword(passwd);

    //2nd step - get crc value
    long crcValue = getCrcValue(hashedPassword, challenge);

    //3rd step - get session token
    String sessionId = MasterdataServices.authenticateByPassword(username, crcValue);
    return sessionId;
}

private static long getCrcValue(String password, long challengeValue) {
    CRC32 crc = new CRC32();
    try {
        crc.update(password.getBytes("UTF-8"));
    } catch (UnsupportedEncodingException e) {
        e.printStackTrace();
    }       
    return crc.getValue() * challengeValue;
}   

private static String getHashedPassword(String password) {
    MessageDigest messageDigest = null;
    try {
        messageDigest = MessageDigest.getInstance("SHA-512");
    } catch (NoSuchAlgorithmException e) {
        e.printStackTrace();
        return null;
    }
    byte[] encryptedPw = null;
    try {
        encryptedPw = messageDigest.digest(password.getBytes("UTF-8"));
    } catch (UnsupportedEncodingException e) {
        e.printStackTrace();
        return null;
    }
    StringBuilder hex = new StringBuilder(encryptedPw.length * 2);

    for(byte b : encryptedPw)
    {
        if((b & 0xff) < 0x10) hex.append("0");
        hex.append(Integer.toHexString(b & 0xff));
    }               

    return hex.toString();
}

有谁知道差异可能来自哪里？

Answer 1

好的，问得太早......问题是由用户欢呼引起的

在不同计算机上具有不同行为的CHAP

1 个答案: