Is there a standard way of representing an SHA1 hash as a C string, and how do I convert to it?

Question

This question is about how to create an SHA-1 hash from an array of data in C using the OpenSSL library.

It returns an array of 20 bytes, containing the hash. Is there some standard way of representing that data in string form, not binary?

If so, is there a function in OpenSSL itself to convert to said string format?

If not, how should it be done? Of course, I can dream up my own encoding, use base64 or what not, but is there some canonical format?

Answer 1

Usually hashes are represented as a sequence of hexadecimal digits (naturally, two per byte). You can write the code to write such thing easily using an ostringstream with the right modifiers:

#include <string>
#include <sstream>
#include <iomanip>

std::string GetHexRepresentation(const unsigned char * Bytes, size_t Length)
{
    std::ostringstream os;
    os.fill('0');
    os<<std::hex;
    for(const unsigned char * ptr=Bytes;ptr<Bytes+Length;ptr++)
        os<<std::setw(2)<<(unsigned int)*ptr;
    return os.str();
}

Answer 2

The standard way of representing hashes is as hexadecimal strings.
In C, you can use printf("%02x", byte) to get a hex representation of each byte.

An example for MD5, should be easy to adapt it for SHA:

http://en.literateprograms.org/MD5_sum_(C,_OpenSSL)

Answer 3

Privacy Enhanced Mail (or PEM) seemed to set the standard for the storage of text representations of crypto data. PEM stores the actual binary chunk in Base64, but has a text header and footer too.