1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
|
/*
*
* Licensed to the Apache Software Foundation (ASF) under one
* or more contributor license agreements. See the NOTICE file
* distributed with this work for additional information
* regarding copyright ownership. The ASF licenses this file
* to you under the Apache License, Version 2.0 (the
* "License"); you may not use this file except in compliance
* with the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing,
* software distributed under the License is distributed on an
* "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
* KIND, either express or implied. See the License for the
* specific language governing permissions and limitations
* under the License.
*
*/
package org.apache.qpid.server.security.auth.sasl;
import java.security.MessageDigest;
import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
public class SaslUtil
{
private static byte SEPARATOR = 0;
public static byte[] generatePlainClientResponse(String userName, String userPassword) throws Exception
{
byte[] password = userPassword.getBytes("UTF8");
byte user[] = userName.getBytes("UTF8");
byte response[] = new byte[password.length + user.length + 2];
int size = 0;
response[size++] = SEPARATOR;
System.arraycopy(user, 0, response, size, user.length);
size += user.length;
response[size++] = SEPARATOR;
System.arraycopy(password, 0, response, size, password.length);
return response;
}
public static byte[] generateCramMD5HexClientResponse(String userName, String userPassword, byte[] challengeBytes)
throws Exception
{
String macAlgorithm = "HmacMD5";
byte[] digestedPasswordBytes = MessageDigest.getInstance("MD5").digest(userPassword.getBytes("UTF-8"));
byte[] hexEncodedDigestedPasswordBytes = toHex(digestedPasswordBytes).getBytes("UTF-8");
Mac mac = Mac.getInstance(macAlgorithm);
mac.init(new SecretKeySpec(hexEncodedDigestedPasswordBytes, macAlgorithm));
final byte[] messageAuthenticationCode = mac.doFinal(challengeBytes);
String responseAsString = userName + " " + toHex(messageAuthenticationCode);
return responseAsString.getBytes();
}
public static byte[] generateCramMD5ClientResponse(String userName, String userPassword, byte[] challengeBytes)
throws Exception
{
String macAlgorithm = "HmacMD5";
Mac mac = Mac.getInstance(macAlgorithm);
mac.init(new SecretKeySpec(userPassword.getBytes("UTF-8"), macAlgorithm));
final byte[] messageAuthenticationCode = mac.doFinal(challengeBytes);
String responseAsString = userName + " " + toHex(messageAuthenticationCode);
return responseAsString.getBytes();
}
public static String toHex(byte[] data)
{
StringBuffer hash = new StringBuffer();
for (int i = 0; i < data.length; i++)
{
String hex = Integer.toHexString(0xFF & data[i]);
if (hex.length() == 1)
{
hash.append('0');
}
hash.append(hex);
}
return hash.toString();
}
}
|
