Generate password hash in java like openssl passwd -1

Question

Is there an easy way in Java to generate password hashes in same form as generated by "openssl passwd -1".

Example:

# openssl passwd -1 test
$1$Gt24/BL6$E4ZsrluohHFxtcdqCH7jo.

I'm looking for a pure java solution that does not call openssl or any other external program.

Thanks Raffael

Answer 1

Perhaps something like this?

MessageDigest md = null;
md = MessageDigest.getInstance("SHA");
md.update(pPassword.getBytes("UTF-8"));
byte raw[] = md.digest();
String hash = BASE64Encoder.encodeBuffer(raw);

The Java BASE64Encoder source can be found on the net.

Answer 2

The openssl docs describe the -1 option as: "Use the MD5 based BSD password algorithm 1."

Jasypt is a java cryptogrqphy library, as is jBCrypt. Jasypt is slightly more complicated, but more configurable.

I don't know that much about crypto, but my guess is that the password generated by openssl breaks down as:
$1$ - specifies that this was generated using the MD5 scheme
Gt24/BL6 - 8 byte salt
$ - delimiter
E4ZsrluohHFxtcdqCH7jo. - hash

so it looks like Jasypt's BasicPasswordEncryptor might be what you want-

Answer 3

You can find source code for the C language version here. It should be straightforward to convert it to pure Java.