Online SHA256 Hash Generator

I'm trying to transform a php code into python language.

the php function calculates the hmac value using sha256 and base64 encoding.

My Php function:

<?phpdefine('SHOPIFY_APP_SECRET', 'some_key');function verify_webhook($data){$calculated_hmac = base64_encode(hash_hmac('sha256', $data, SHOPIFY_APP_SECRET, true));echo $calculated_hmac;}$data = "some_data";$verified = verify_webhook($data);?>

My Python function:

import base64import hmacimport binasciifrom hashlib import sha256API_SECRET_KEY = "some_key"data = "some_data"def verify_webhook():    dig = hmac.new(        API_SECRET_KEY,        msg=data,        digestmod=sha256        ).digest()    calculated_hmac = base64.b64encode(bytes(binascii.hexlify(dig)))    print(calculated_hmac)verify_webhook()

I got different outputs even I have the same key and data. I still don't know what I'm missing here. please help!

Python output:

YWM3NjlhMDZjMmViMzdmM2E3YjhiZGY4NjhkNTZhOGZhMDgzZDM4MGM1OTkyZTM4YjA5MDNkMDEwNGEwMzJjMA==

Php output:

N7JyAyKocoDx/Opx36nGqAuUKdyGH+ROX+J5AJgQ+/g=

I'm using the hash function sha256.Sum256(data []byte) [sha256.Size]byte. I need that the returned digest is stored at the end of another bigger array.

var x [sha256.BlockSize+sha256.Size]byte ? = sha256.Sum256(data)

The only solution I found so far is the following:

var x [sha256.BlockSize+sha256.Size]byte var d = sha256.Sum256(data)copy(x[sha256.BlockSize:], d[:]) 

Is it possible to avoid this copy ?

I'm working on small tool to encrypt and decrypt data base on RSA Algo.I used openSSL to create private and public key. then import to java code and encrypt and decrypt data.Fisrt, I use follow command to generate public and private key

openssl genrsa -out private_key.pem 2048openssl req -new -x509 -sha256 -key private_key.pem -out public_key.cer -days 3650

Next, get public key from file:

    private static PublicKey getPublicKey(String publicKey) throws IOException, GeneralSecurityException {        String publicKeyPEM = getKey(publicKey);        return getPublicKeyFromString(publicKeyPEM);    }    private static PublicKey getPublicKeyFromString(String key) throws IOException, GeneralSecurityException {        String publicKeyPEM = key;        publicKeyPEM = publicKeyPEM.replace("-----BEGIN CERTIFICATE-----\n", "");        publicKeyPEM = publicKeyPEM.replace("-----END CERTIFICATE-----", "");        byte[] encoded = Base64.decodeBase64(publicKeyPEM);        CertificateFactory fact = CertificateFactory.getInstance("X.509");        InputStream is = new ByteArrayInputStream(encoded);        X509Certificate cer = (X509Certificate) fact.generateCertificate(is);        return cer.getPublicKey();    }

And private key from file

private static PrivateKey getPrivateKey(String privateKey) throws IOException, GeneralSecurityException {        String privateKeyPEM = getKey(privateKey);        return getPrivateKeyFromString(privateKeyPEM);    }    private static PrivateKey getPrivateKeyFromString(String key) throws IOException, GeneralSecurityException {        String privateKeyPEM = key;        privateKeyPEM = privateKeyPEM.replace("-----BEGIN RSA PRIVATE KEY-----\n", "");        privateKeyPEM = privateKeyPEM.replace("\n-----END RSA PRIVATE KEY-----\n", "");        KeyFactory kf = KeyFactory.getInstance("RSA");        byte[] data = DatatypeConverter.parseBase64Binary(privateKeyPEM);        ASN1Sequence primitive = (ASN1Sequence) ASN1Sequence                .fromByteArray(data);        Enumeration<?> e = primitive.getObjects();        BigInteger v = ((DERInteger) e.nextElement()).getValue();        int version = v.intValue();        if (version != 0 && version != 1) {            throw new IllegalArgumentException("wrong version for RSA private key");        }        /**         * In fact only modulus and private exponent are in use.         */        BigInteger modulus = ((DERInteger) e.nextElement()).getValue();        BigInteger publicExponent = ((DERInteger) e.nextElement()).getValue();        BigInteger privateExponent = ((DERInteger) e.nextElement()).getValue();        BigInteger prime1 = ((DERInteger) e.nextElement()).getValue();        BigInteger prime2 = ((DERInteger) e.nextElement()).getValue();        BigInteger exponent1 = ((DERInteger) e.nextElement()).getValue();        BigInteger exponent2 = ((DERInteger) e.nextElement()).getValue();        BigInteger coefficient = ((DERInteger) e.nextElement()).getValue();        RSAPrivateKeySpec spec = new RSAPrivateKeySpec(modulus, privateExponent);        PrivateKey pk = kf.generatePrivate(spec);        return pk;    }

Then encrypt

private static byte[] encrypt(String text, PublicKey key) {        byte[] cipherText = null;        try {            // get an RSA cipher object and print the provider            final Cipher cipher = Cipher.getInstance(ALGORITHM);            // encrypt the plain text using the public key            cipher.init(Cipher.ENCRYPT_MODE, key);            cipherText = cipher.doFinal(text.getBytes());        } catch (Exception e) {            e.printStackTrace();        }        return cipherText;    }

And decrypt

private static String decrypt(byte[] text, PrivateKey key) {        try {            // get an RSA cipher object and print the provider            final Cipher cipher = Cipher.getInstance(ALGORITHM);            // decrypt the text using the private key            cipher.init(Cipher.DECRYPT_MODE, key);            byte[] decryptTxt = cipher.doFinal(text);            return new String(decryptTxt);        } catch (Exception ex) {            ex.printStackTrace();            return null;        }    }

So, encryption success, but in decrypt, I got following exception:

javax.crypto.BadPaddingException: Decryption error    at sun.security.rsa.RSAPadding.unpadV15(RSAPadding.java:380)    at sun.security.rsa.RSAPadding.unpad(RSAPadding.java:291)    at com.sun.crypto.provider.RSACipher.doFinal(RSACipher.java:363)    at com.sun.crypto.provider.RSACipher.engineDoFinal(RSACipher.java:389)    at javax.crypto.Cipher.doFinal(Cipher.java:2165)    at pgp.RSAUtil.decrypt(RSAUtil.java:46)    at pgp.RSAUtil.getDecryptData(RSAUtil.java:67)    at pgp.PGPForm$2.actionPerformed(PGPForm.java:109)    at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)    at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2348)    at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)    at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)    at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:252)    at java.awt.Component.processMouseEvent(Component.java:6533)    at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)    at java.awt.Component.processEvent(Component.java:6298)    at java.awt.Container.processEvent(Container.java:2236)    at java.awt.Component.dispatchEventImpl(Component.java:4889)    at java.awt.Container.dispatchEventImpl(Container.java:2294)    at java.awt.Component.dispatchEvent(Component.java:4711)    at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4888)    at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4525)    at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4466)    at java.awt.Container.dispatchEventImpl(Container.java:2280)    at java.awt.Window.dispatchEventImpl(Window.java:2746)    at java.awt.Component.dispatchEvent(Component.java:4711)    at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)    at java.awt.EventQueue.access$500(EventQueue.java:97)    at java.awt.EventQueue$3.run(EventQueue.java:709)    at java.awt.EventQueue$3.run(EventQueue.java:703)    at java.security.AccessController.doPrivileged(Native Method)    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:80)    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:90)    at java.awt.EventQueue$4.run(EventQueue.java:731)    at java.awt.EventQueue$4.run(EventQueue.java:729)    at java.security.AccessController.doPrivileged(Native Method)    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:80)    at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)    at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)    at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)    at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)    at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)Exception in thread "AWT-EventQueue-0" java.lang.NullPointerException    at java.util.Base64$Decoder.decode(Base64.java:549)    at pgp.PGPForm$2.actionPerformed(PGPForm.java:110)    at javax.swing.AbstractButton.fireActionPerformed(AbstractButton.java:2022)    at javax.swing.AbstractButton$Handler.actionPerformed(AbstractButton.java:2348)    at javax.swing.DefaultButtonModel.fireActionPerformed(DefaultButtonModel.java:402)    at javax.swing.DefaultButtonModel.setPressed(DefaultButtonModel.java:259)    at javax.swing.plaf.basic.BasicButtonListener.mouseReleased(BasicButtonListener.java:252)    at java.awt.Component.processMouseEvent(Component.java:6533)    at javax.swing.JComponent.processMouseEvent(JComponent.java:3324)    at java.awt.Component.processEvent(Component.java:6298)    at java.awt.Container.processEvent(Container.java:2236)    at java.awt.Component.dispatchEventImpl(Component.java:4889)    at java.awt.Container.dispatchEventImpl(Container.java:2294)    at java.awt.Component.dispatchEvent(Component.java:4711)    at java.awt.LightweightDispatcher.retargetMouseEvent(Container.java:4888)    at java.awt.LightweightDispatcher.processMouseEvent(Container.java:4525)    at java.awt.LightweightDispatcher.dispatchEvent(Container.java:4466)    at java.awt.Container.dispatchEventImpl(Container.java:2280)    at java.awt.Window.dispatchEventImpl(Window.java:2746)    at java.awt.Component.dispatchEvent(Component.java:4711)    at java.awt.EventQueue.dispatchEventImpl(EventQueue.java:758)    at java.awt.EventQueue.access$500(EventQueue.java:97)    at java.awt.EventQueue$3.run(EventQueue.java:709)    at java.awt.EventQueue$3.run(EventQueue.java:703)    at java.security.AccessController.doPrivileged(Native Method)    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:80)    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:90)    at java.awt.EventQueue$4.run(EventQueue.java:731)    at java.awt.EventQueue$4.run(EventQueue.java:729)    at java.security.AccessController.doPrivileged(Native Method)    at java.security.ProtectionDomain$JavaSecurityAccessImpl.doIntersectionPrivilege(ProtectionDomain.java:80)    at java.awt.EventQueue.dispatchEvent(EventQueue.java:728)    at java.awt.EventDispatchThread.pumpOneEventForFilters(EventDispatchThread.java:201)    at java.awt.EventDispatchThread.pumpEventsForFilter(EventDispatchThread.java:116)    at java.awt.EventDispatchThread.pumpEventsForHierarchy(EventDispatchThread.java:105)    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:101)    at java.awt.EventDispatchThread.pumpEvents(EventDispatchThread.java:93)    at java.awt.EventDispatchThread.run(EventDispatchThread.java:82)

So, without -sha256 in public key when run openSSL, this source code work fine. When I add it, I got exceptions above.

Any solutions? Thanks and regards.

I am using the jose-jwt library and want to create an encrypted JWT in C# using the RS256 algorithm for encryption. I have no experience with cryptography, so please excuse my ignorance. I see the following example in the docs:

var payload = new Dictionary<string, object>(){    { "sub", "mr.x@contoso.com" },    { "exp", 1300819380 }};var privateKey=new X509Certificate2("my-key.p12", "password", X509KeyStorageFlags.Exportable | X509KeyStorageFlags.MachineKeySet).PrivateKey as RSACryptoServiceProvider;string token=Jose.JWT.Encode(payload, privateKey, JwsAlgorithm.RS256);

which shows the use of a p12 file, but how do I use an RSA key file of the form below? I am looking at the docs for X509Certificate2, but I see no option for RSA private keys. It appears to only accept PKCS7, which I understand to be public keys.

-----BEGIN RSA PRIVATE KEY-----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-----END RSA PRIVATE KEY-----

Finally, what is the difference between the two options listed in the docs, and how do I choose between the two?

-------------------------- OPTION 1 --------------------------

RS-* and PS-* family

CLR:

RS256, RS384, RS512 and PS256, PS384, PS512 signatures require RSACryptoServiceProvider (usually private) key of corresponding length. CSP need to be forced to use Microsoft Enhanced RSA and AES Cryptographic Provider. Which usually can be done be re-importing RSAParameters. See http://clrsecurity.codeplex.com/discussions/243156 for details.

-------------------------- OPTION 2 --------------------------

CORECLR: RS256, RS384, RS512 signatures require RSA (usually private) key of corresponding length.

I'm trying to generate a base64 hash based on two inputs - a message and a key, both being strings, using HMAC SHA256. I've spent hours looking for answers and did come across a few sites or other posts on Stack Overflow, but unfortunately none seem to be what I need.

Is it possible to code a function myself on VBA? I'm using Mac so those CreateObject commands I saw elsewhere won't be available.

Here is what I found so far that I think could be relevant - hope it helps others who are trying to achieve the same using other languages or Windows.

https://www.jokecamp.com/blog/examples-of-creating-base64-hashes-using-hmac-sha256-in-different-languages/#csharp

http://www.vbforums.com/showthread.php?635398-VB6-HMAC-SHA-256-HMAC-SHA-1-Using-Crypto-API