org.postgresql.util.MD5Digest Maven / Gradle / Ivy

Go to download

Show more of this group Show more artifacts with this name
Show all versions of jdbc-yugabytedb Show documentation

Java JDBC 4.2 (JRE 8+) driver for YugaByte SQL database

The newest version!

/*
 * Copyright (c) 2003, PostgreSQL Global Development Group
 * See the LICENSE file in the project root for more information.
 */

package org.postgresql.util;

import java.security.MessageDigest;
import java.security.NoSuchAlgorithmException;

/**
 * MD5-based utility function to obfuscate passwords before network transmission.
 *
 * @author Jeremy Wohl
 */
public class MD5Digest {

  private static final byte[] HEX_BYTES = {'0', '1', '2', '3', '4', '5', '6', '7', '8', '9', 'a', 'b', 'c', 'd', 'e', 'f'};

  private MD5Digest() {
  }

  /**
   * Encodes user/password/salt information in the following way: MD5(MD5(password + user) + salt).
   *
   * @param user The connecting user.
   * @param password The connecting user's password.
   * @param salt A four-salt sent by the server.
   * @return A 35-byte array, comprising the string "md5" and an MD5 digest.
   */
  public static byte[] encode(byte[] user, byte[] password, byte[] salt) {
    try {
      final MessageDigest md = MessageDigest.getInstance("MD5");

      md.update(password);
      md.update(user);
      byte[] digest = md.digest();

      final byte[] hexDigest = new byte[35];

      bytesToHex(digest, hexDigest, 0);
      md.update(hexDigest, 0, 32);
      md.update(salt);
      digest = md.digest();

      bytesToHex(digest, hexDigest, 3);
      hexDigest[0] = (byte) 'm';
      hexDigest[1] = (byte) 'd';
      hexDigest[2] = (byte) '5';

      return hexDigest;
    } catch (NoSuchAlgorithmException e) {
      throw new IllegalStateException("Unable to encode password with MD5", e);
    }
  }

  /*
   * Turn 16-byte stream into a human-readable 32-byte hex string
   */
  public static void bytesToHex(byte[] bytes, byte[] hex, int offset) {
    int pos = offset;
    for (int i = 0; i < 16; i++) {
      //bit twiddling converts to int, so just do it once here for both operations
      final int c = bytes[i] & 0xFF;
      hex[pos++] = HEX_BYTES[c >> 4];
      hex[pos++] = HEX_BYTES[c & 0xF];
    }
  }
}