Convert hashed byte array into String

Question

If I do something like

int keyLength = 160; // because SHA1 generates 160-bit hashes
int iterations = 20 * 1000; //standard is 2000 but let's be more secure here

KeySpec spec = new PBEKeySpec(password.toCharArray(), generateSalt(), iterations, keyLength);
SecretKeyFactory keyFactory = SecretKeyFactory.getInstance("PBKDF2WithHmacSHA1");
byte[] hash = keyFactory.generateSecret(spec).getEncoded();

How do I convert this hash into String so it can be saved into DB?I tried new String(hash, "UTF-8"); but that gives malformed characters like l��0\�w�c��Q�.

Zim-Zam O'Pootertoot · Accepted Answer · 2013-04-26 21:40:00Z

5

You need to encode the byte array into a Base64 string, then decode it back to a byte array when you read it from the database. Note that the encoded string will be around 33% larger than the original byte array.

answered Apr 26, 2013 at 21:40

Zim-Zam O'Pootertoot

18.2k4 gold badges45 silver badges71 bronze badges

Sign up to request clarification or add additional context in comments.

Comments

Ravi K Thapliyal · Accepted Answer · 2013-04-26 21:48:34Z

1

If you'll always consume your key as a byte[] in your application it would be far better to save it as a BLOB binary object itself in the database. You'll save yourself from conversion errors.

answered Apr 26, 2013 at 21:48

Ravi K Thapliyal

51.9k9 gold badges80 silver badges90 bronze badges

Collectives™ on Stack Overflow

Convert hashed byte array into String

2 Answers 2

Comments

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

2 Answers 2

Comments

Comments

Your Answer

Sign up or log in

Post as a guest

Related