Formatting the output of hash values

[Wayne Deleersnyder]

Hi All,

I was going to write and ask if someone could help me fix the
formatting of my output for hash values, but I believe I got it right
now. But, because I couldn't find any website or tutorial to help me
with this issue I figured I'd make a post just in case someone else
runs into the same issue.

....

This past weekend I was just messing around learning about encryption
and hash values. I need hash values for a database I'm making. But,
along the way I came across MD5, SHA1, SHA2(256, 384, and 512
variants), plus others. I read that SHA2 is soon to be the new
defacto hash algorithm to use because of some identified weaknesses
(although from the looks of it, you'll need a pretty nice computer to
actually start cracking SHA1). Anyways, I figured I'd use SHA2
(SHA512).

C# has a nice function for creating a hash value all in one step:

string hashValue =
FormsAuthentica tion.HashPasswo rdForStoringInC onfigFile(thePa ssword,
"SHA1");

Although you can use "MD5" or "SHA1." But nothing else for the SHA2
stuff.

So eventually I started messing around and put together this little
snippet of code:
....
using System.Security .Cryptography;

string hashValue;
string thePassword = "test1";
byte[] hashedPassword;
HashAlgorithm alg_SHA512 = HashAlgorithm.C reate("SHA512") ;

// Do a hash using the SHA512 Algorithm
hashedPassword = alg_SHA512.Comp uteHash(UTF8enc odedPassword);
hashValue = BitConverter.To String(hashedPa ssword);
lbl_SHA512_Alg_ usingBitConvert er.Text = "SHA512 using BitConverter: "
+ thePassword + " = " + hashValue;

But this would output a value something like this:
SHA512 using BitConverter: test1 = B1-6E-D7-D2-4B-3E-CB-D4-16-4D-CD-
AD-37-4E-08-C0-AB-75-18-AA-07-F9-D3-68-3F-34-C2-B3-C6-7A-15-83-02-68-
CB-4A-56-C1-FF-6F-54-C8-E5-4A-79-5F-5B-87-C0-86-68-B5-1F-82-
D0-09-3F-7B-AE-E7-D2-98-11-81
I didn't like the hyphens, so after doing some digging around, I ended
up with this...
....
using System.Security .Cryptography;
protected void hashThis()
{

string hashValue;
string hashValue2 = "";
string thePassword = "test1";
byte[] hashedPassword;

HashAlgorithm alg_MD5 = HashAlgorithm.C reate("MD5");
HashAlgorithm alg_SHA1 = HashAlgorithm.C reate("SHA1");
HashAlgorithm alg_SHA512 = HashAlgorithm.C reate("SHA512") ;

hashValue =
FormsAuthentica tion.HashPasswo rdForStoringInC onfigFile(thePa ssword,
"MD5");
lbl_MD5_Forms.T ext = "MD5: " + thePassword + " = " +
hashValue;

hashValue =
FormsAuthentica tion.HashPasswo rdForStoringInC onfigFile(thePa ssword,
"SHA1");
lbl_SHA1_Forms. Text = "SHA1: " + thePassword + " = " +
hashValue;
// Convert the password into a byte array so it can be
handled by the hash algorithm(s)
System.Text.UTF 8Encoding textConverter = new
System.Text.UTF 8Encoding();
byte[] UTF8encodedPass word =
textConverter.G etBytes(thePass word);
// Do a hash using the MD5 Algorithm
hashedPassword = alg_MD5.Compute Hash(UTF8encode dPassword);
hashValue = convertByteToHe xString(hashedP assword);
lbl_MD5_Alg.Tex t = "MD5 Algoritm: " + thePassword + " = " +
hashValue;

// Do a hash using the SHA1 Algorithm
hashedPassword = alg_SHA1.Comput eHash(UTF8encod edPassword);
hashValue = convertByteToHe xString(hashedP assword);
lbl_SHA1_Alg.Te xt = "SHA1 Algoritm: " + thePassword + " = " +
hashValue;
// Do a hash using the SHA512 Algorithm
hashedPassword = alg_SHA512.Comp uteHash(UTF8enc odedPassword);
hashValue2 = BitConverter.To String(hashedPa ssword);
hashValue = convertByteToHe xString(hashedP assword);
lbl_SHA512_Alg. Text = "SHA512 Algoritm: " + thePassword + " =
" + hashValue;
lbl_SHA512_Alg_ usingBitConvert er.Text = "SHA512 using
BitConverter: " + thePassword +
" = " + hashValue2;
}
// convertByteToHe xString
// Description: calls the overloaded function with no delimiter
protected string convertByteToHe xString(byte[] byteArray)
{
return convertByteToHe xString(byteArr ay, "");
}
// convertByteToHe xString
// Description: converts a byte array to a Hex String, using a
delimiter
protected string convertByteToHe xString(byte[] byteArray, string
delimiter)
{
string str_HexString = ""; // the
string where the hex value is stored
int lengthOfByteArr ay = byteArray.Lengt h;
int count = 1;

foreach (byte x in byteArray)
{
str_HexString += x.ToString("X2" ); // convert the
string to display in hex format
if (count++ < lengthOfByteArr ay)
{
str_HexString += delimiter;
}
}
return str_HexString;
}
Which gives me output that looks something like this:
MD5: test1 = 5A105E8B9D40E13 29780D62EA2265D 8A
SHA1: test1 = B444AC06613FC8D 63795BE9AD0BEAF 55011936AC
MD5 Algoritm: test1 = 5A105E8B9D40E13 29780D62EA2265D 8A
SHA1 Algoritm: test1 = B444AC06613FC8D 63795BE9AD0BEAF 55011936AC
SHA512 Algoritm: test1 =
B16ED7D24B3ECBD 4164DCDAD374E08 C0AB7518AA07F9D 3683F34C2B3C67A 15830268CB4A56C 1FF6F54C8E54A79 5F5B87C08668B51 F82D0093F7BAEE7 D2981181
SHA512 using BitConverter: test1 = B1-6E-D7-D2-4B-3E-CB-D4-16-4D-CD-
AD-37-4E-08-C0-AB-75-18-AA-07-F9-D3-68-3F-34-C2-B3-C6-7A-15-83-02-68-
CB-4A-56-C1-FF-6F-54-C8-E5-4A-79-5F-5B-87-C0-86-68-B5-1F-82-
D0-09-3F-7B-AE-E7-D2-98-11-81
So in the end, the convertByteToHe xString method creates a string
without the hyphens. Actually I can set my own delimiters this way if
I wish. Anyways... that's what I ended up with. If that helps
anyone, great. If you see errors, or I made a BIG booboo, please let
me know.

Later,
Wayne D.

[Marc Gravell]

2 points; first: this would be a good candidate for StringBuilder
rather than concatenation (otherwise you end up with a lot of
intermediary string objects floating around waiting to be GCd)
second: hex encoding is fine, but you may also wish to look at base
64; this would save you a bit of space (as if that mattered these
days) and complexity (more important); look at:

http://msdn2.microsoft.com/en-us/lib...e64string.aspx
and
http://msdn2.microsoft.com/en-us/library/dhx0d524.aspx

Marc