shawn peter

but the i need to validate this not the pragmatically, i need to validate using user friendly way. For example i need to validate using some website which take password and salt value and generate the hashed password.
Also i stored the hashed password as a byte array. So i need to convert it to String before doing validation.

Hi Stephan,

This is for just practise. I need to generate the hash password using salt and password. Then need to check it is generating same value. Can you provide me a way for it.

I used sha512 with salt value. So i need to verify the generated hash value is correct ?
I am using binary array as a salt.
I am using https://www.baeldung.com/java-password-hashing as reference. below is the code. So i will save the hashed valeu and salt in DB.
SecureRandom random = new SecureRandom(); byte[] salt = new byte[16]; random.nextBytes(salt); MessageDigest md = MessageDigest.getInstance("SHA-512"); md.update(salt); byte[] hashedPassword = md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));

I need to verify that the generated hashed value by manually . foe example i need to hash the same password using that salt value and check that i am getting same hashed value . I found below site but it does not provide place to add salt value ?

sha256 site

Finally i found the below site which can encode and decode the byte array to String . So i can convert the my stored byte array to the String value and used in test class.

http://www.utilities-online.info/base64/#.XVs2MugzaUl

I am following below tutorial.

https://www.baeldung.com/java-password-hashing

so the salt value in the java is a byte array. I am saving it as a byte array in DB also.
So how can i use it in my test class. For example if i write testmethod as below

@Test    public void testgetPasswordSHA512() {        String expected = "XXXSDDFFAFFGGGGGGGGGGG=";  // value you expect to get back        Byte[] saltValue= ??                //assertEquals(expected, SHA512(password,saltValue));        assertEquals(expected, SHA512("123456789mySaltValue",saltValue));            }

I have issue since i am saving salt as a byte array in DB. So when i am testing hashing function , i need t give the save salt to get the same hash value. But in DB it saves as a byte array which is not readable. I can get the hash password from the directly for a give user, but not the salt value. I am using SQL server, so the column type of the salt is varbinary. How can i get the exact salt value for a given user?

I need to  know the salt as is it a one parameter of "get_SHA_512_SecurePassword" method. So if i am going to call that methos i need send salt as a one parameter.

I need to know how to do the unit testing for the password hashing?

for example i used sha512 for hashing my password as below

public String get_SHA_512_SecurePassword(String passwordToHash, String   salt){ String generatedPassword = null;    try {         MessageDigest md = MessageDigest.getInstance("SHA-512");         md.update(salt.getBytes(StandardCharsets.UTF_8));         byte[] bytes = md.digest(passwordToHash.getBytes(StandardCharsets.UTF_8));         StringBuilder sb = new StringBuilder();         for(int i=0; i< bytes.length ;i++){            sb.append(Integer.toString((bytes[i] & 0xff) + 0x100, 16).substring(1));         }         generatedPassword = sb.toString();        }       catch (NoSuchAlgorithmException e){        e.printStackTrace();       }    return generatedPassword; }

So how can i do the unit testing for this function?
because i don't have the sat value for users as they are stored in DB

I am using below code.

            MessageDigest md = MessageDigest.getInstance("SHA-512");             md.update(mysalt);             String passwordPepper=password+PEPPER_STRING;             byte[] hashedPassword = md.digest(passwordPepper.getBytes(StandardCharsets.UTF_8));             String storepass = Base64.encode(hashedPassword );

mysalt value is a byte array. So i believe this approach is a fine.

can you provide me a sample of pepper. according to below tutorial it is a another String value.  Ijust need to know how to add salt value when do hashing the password

https://happycoding.io/tutorials/java-server/secure-password-storage#peppering-passwords

I just need to know how to add salt value when do hashing the password.  Currently i  am using String password and byte array for salt.

yes, it was issue of the salt since salt saved as a String it may changes the content. I saved the salt as a byte array and now it is ok. I have one more question . If i use pepper as another salt where it must be saved. in the code or config file ?

I tried to save password as hash values. I used sha512 with salt. When i try to verify the password seems it generate different hash values .I am generating random salt using SecureRandom class in java.

I have a project which has several modules. I am using intellij as a IDE and gradle as a build too.
I have  a issue that when i try to open dependency class it opens class from jar file which is build and not the actual module code. I need to know why it open the class from jar file?

I am creating a struts 1 example. I am getting below error when i run the project.I have attached the project structure as well.

java.lang.ClassNotFoundException: org.apache.struts.action.ActionServlet at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1363) at org.apache.catalina.loader.WebappClassLoaderBase.loadClass(WebappClassLoaderBase.java:1186) at org.apache.catalina.core.DefaultInstanceManager.loadClass(DefaultInstanceManager.java:540) at org.apache.catalina.core.DefaultInstanceManager.loadClassMaybePrivileged(DefaultInstanceManager.java:521) at org.apache.catalina.core.DefaultInstanceManager.newInstance(DefaultInstanceManager.java:150) at org.apache.catalina.core.StandardWrapper.loadServlet(StandardWrapper.java:1031) at org.apache.catalina.core.StandardWrapper.load(StandardWrapper.java:971) at org.apache.catalina.core.StandardContext.loadOnStartup(StandardContext.java:4868) at org.apache.catalina.core.StandardContext.startInternal(StandardContext.java:5184) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1377) at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1367) at java.util.concurrent.FutureTask.run(Unknown Source) at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75) at java.util.concurrent.AbstractExecutorService.submit(Unknown Source) at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:902) at org.apache.catalina.core.StandardHost.startInternal(StandardHost.java:831) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1377) at org.apache.catalina.core.ContainerBase$StartChild.call(ContainerBase.java:1367) at java.util.concurrent.FutureTask.run(Unknown Source) at org.apache.tomcat.util.threads.InlineExecutorService.execute(InlineExecutorService.java:75) at java.util.concurrent.AbstractExecutorService.submit(Unknown Source) at org.apache.catalina.core.ContainerBase.startInternal(ContainerBase.java:902) at org.apache.catalina.core.StandardEngine.startInternal(StandardEngine.java:262) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) at org.apache.catalina.core.StandardService.startInternal(StandardService.java:423) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) at org.apache.catalina.core.StandardServer.startInternal(StandardServer.java:928) at org.apache.catalina.util.LifecycleBase.start(LifecycleBase.java:183) at org.apache.catalina.startup.Catalina.start(Catalina.java:634) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(Unknown Source) at java.lang.reflect.Method.invoke(Unknown Source) at org.apache.catalina.startup.Bootstrap.start(Bootstrap.java:350) at org.apache.catalina.startup.Bootstrap.main(Bootstrap.java:492)

I heard that java 10 does not support EJB? is it true? If so how can old project continue? do they have to change to open JDK ?