Online SHA1 Hash Generator

I am trying to run an openssl command from a Python script, but am getting different sha1 values from the command executed in the script and the command executed directly in the terminal.

Here is my code:

command = "echo -n '" + hex(key)[2:] + "' | openssl sha1"print(command)os.system(command)output = subprocess.check_output(command, shell=True)# This converts the bytes object to a string.output = output.decode("utf-8")print(output)

The os.system(command) is only there to check whether this method and subprocess.check_output() give the same result.

Here is the program output for an example input of key=0xabc:

echo -n 'abc' | openssl sha1(stdin)= 9d4fe92b8bdc894f5838fad83108bf3841b257fa(stdin)= 9d4fe92b8bdc894f5838fad83108bf3841b257fa

The first line is the command to be executed, the second is the result of the command using os.system() and the third is the result of the command using subprocess.check_output(). As you can see, both methods give the same result.

Now, if I copy and paste the command as it is displayed here and execute it in the terminal, this is the result:

(stdin)= a9993e364706816aba3e25717850c26c9cd0d89d

Even though I copy and pasted the exact same command, the hash value output is different.

Even stranger, if I omit the -n option from echo, there is no inconsistency:

echo 'abc' | openssl sha1(stdin)= 03cfd743661f07975fa2f1220c5194cbaff48451(stdin)= 03cfd743661f07975fa2f1220c5194cbaff48451

And in the terminal:

(stdin)= 03cfd743661f07975fa2f1220c5194cbaff48451

Everything I have read online about similar issues stems from not using -n, rather than -n seemingly causing the issue. For the particular task I am doing, I have to use -n as I am computing the pre-image of a hash which was calculated using echo -n "hash_value" | openssl sha1.

Any help would be much appreciated :)

I am having the following code to get the hash value of String:

package encryption;import java.security.MessageDigest; public class MessageDigestExample {    public static void main(String[] args)throws Exception{        String input = "This is a message";        MessageDigest hash = MessageDigest.getInstance("SHA1");        System.out.println("input : " + input);        hash.update(Utils.toByteArray(input));        System.out.println("digest : " + Utils.toHex(hash.digest()));        } } 

I am getting this exception at the moment:

Exception in thread "main" java.lang.Error: Unresolved compilation problems:     Utils cannot be resolved    Utils cannot be resolved

I added apache-storm-1.2.2 lib, but does not work,

Any help, please!

I have this code that I have been using for passwords that I want to update to SHA2 (256). The createUser function is like this:

    public function createUser( $username, $password )    {        $salt = $this->_generateSalt();        $password = $salt.$password;        $sql = "INSERT INTO users VALUES (NULL, ?, SHA1(?), ?, NOW(), NOW())";        if( !$this->stmt = $this->mysqli->prepare($sql) )            throw new Exception("MySQL Prepare statement failed: ".$this->mysqli->error);        $this->stmt->bind_param("sss", $username, $password, $salt);        if( $this->stmt->execute() )            return $this->stmt->insert_id;        return false;    }

The login is this:

    public function loginUser( $username, $password )    {        $sql = "SELECT userId FROM users WHERE uUsername=? AND SHA1(CONCAT(uSalt, ?))=uPassword LIMIT 1";        if( !$this->stmt = $this->mysqli->prepare($sql) )            throw new Exception("MySQL Prepare statement failed: ".$this->mysqli->error);        $this->stmt->bind_param("ss", $username, $password);        $this->stmt->execute();        $this->stmt->store_result();        if( $this->stmt->num_rows == 0)            return false;        $this->stmt->bind_result($userId);        $this->stmt->fetch();        $_SESSION[$this->sessionName]["userId"] = $userId;        $this->logged_in = true;        return $userId;    }

And lastly the change password is like this:

public function setPassword( $password, $userId = null ) {

        if( $userId == null )            $userId = $_SESSION[$this->sessionName]["userId"];        $salt = $this->_generateSalt();        $password = $salt.$password;        $sql = "UPDATE users SET uPassword=SHA1(?), uSalt=? WHERE userId=? LIMIT 1";        if( !$this->stmt = $this->mysqli->prepare($sql) )            throw new Exception("MySQL Prepare statement failed: ".$this->mysqli->error);        $this->stmt->bind_param("ssi", $password, $salt, $userId);        return $this->stmt->execute();    }

And advice on how to do the changes from SHA1 to SHA256 in these code blocks? Thanks.

I'm facing a problem with password hashing in python.I need to send hashed password encoded in base64 via some legacy API.

I'm trying to figure out how python make the hashing and encoding.This is example code:

import base64import hashlibpure_string = "password"hashed_string = hashlib.new("sha1")hashed_string.update(pure_string.encode())encoded_hashed_string = base64.standard_b64encode(hashed_string.digest())encoded_hashed_string_not = base64.standard_b64encode(hashed_string.hexdigest().encode())print("Pure string is: " + pure_string)print("Hashed string is: " + hashed_string.hexdigest())print("encoded hashed string is: " + base64.standard_b64encode(b'5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8').decode())print("encoded hashed string is: " + base64.standard_b64encode(hashed_string.hexdigest().encode()).decode())print("Hashed and encoded string is: " + encoded_hashed_string.decode())print("Hashed and encoded string is not: " + encoded_hashed_string_not.decode())

Result is:

Pure string is: passwordHashed string is: 5baa61e4c9b93f3f0682250b6cf8331b7ee68fd8encoded hashed string is: NWJhYTYxZTRjOWI5M2YzZjA2ODIyNTBiNmNmODMzMWI3ZWU2OGZkOA==encoded hashed string is: NWJhYTYxZTRjOWI5M2YzZjA2ODIyNTBiNmNmODMzMWI3ZWU2OGZkOA==Hashed and encoded string is: W6ph5Mm5Pz8GgiULbPgzG37mj9g=Hashed and encoded string is not: NWJhYTYxZTRjOWI5M2YzZjA2ODIyNTBiNmNmODMzMWI3ZWU2OGZkOA==

I need to understand why, hashing and base64 encoding of raw string password gives me different values than when I encode hash of the password.In my case, the only correct value (which will be accepted by application) is Hashed and encoded string is: W6ph5Mm5Pz8GgiULbPgzG37mj9g=.

The difficulty is, that I will have hashed passwords strings (not pure passwords), which I need to encode (and this gives me incorrect value).

I appreciate any help.

I would like to know what is the impact of dropping SHA1 code signing in favour of SHA256-only code signing as of October 2018. I am currently dual code signing my executables to ensure they will get validated on all versions of Windows starting from Windows 7 / Windows Server 2008 R2. There are many articles online showing code signing requirement matrices, but it's not so clear how many environments in practice won't validate SHA256-only signatures. From what I understood, SHA256 code signing support came in an update in Windows 7, but I don't know if this update is widely installed.

The reason I am asking is because I know it is just a matter of time before SHA256 is supported on all versions of Windows that are not in their end of life, and I am considering using AzureSignTool (https://github.com/vcsjones/AzureSignTool) which doesn't support SHA1 code signing.