PHP & JAVA 实现 PBKDF2 加密算法

PHP代码：

/**

     * PBKDF2 加密函数

     * 参考标准

     * @link https://www.ietf.org/rfc/rfc2898.txt

     *

     * php官方函数将在php5.5发布

     * @see http://php.net/manual/en/function.hash-pbkdf2.php

     * example: pbkdf2("sha256", 'password', 'salt', 1, 20);

     * result:120fb6cffcf8b32c43e7 (与php5.5内置的pbkdf2函数输出一至)

     *

     * @param string $algo             The hash algorithm to use. Recommended: SHA256

     * @param string $password         The password to use for the derivation.

     * @param string $salt             The salt to use for the derivation.

     * @param int     $iterations    The number of internal iterations to perform for the derivation.

     * @param int     $length        The length of the derived key to output. If 0, the length of the supplied algorithm is used.

     * @param boolean $raw_output    When set to TRUE, outputs raw binary data. FALSE outputs lowercase hexits.

     * @return string

     */

    public static function pbkdf2($algo, $password, $salt, $iterations, $length= 0, $raw_output = false)

    {

        $algo = strtolower($algo);

        if(!in_array($algo, hash_algos(), true))

            throw new Exception('PBKDF2 ERROR: Invalid hash algorithm.');

        if($iterations <= 0)

            throw new Exception('PBKDF2 ERROR: Invalid parameters.');

        // hash方式默认长度，对一个空值进行hash计算，得出

        // length in octets of pseudorandom function output, a positive integer

        $hlen = strlen(hash($algo, null, true));

        if ($length <=0) $length = $hlen;

        if ($length > (pow(2,32)-1)*$hlen)

            throw new Exception('PBKDF2 ERROR: derived key too long.');



        // 如果生成的加密值长度低于取值长度，就将加密再执行N遍以补足数据长度

        // N=取值长度除以加密方式对应的值长度加一法取整

        $block_count = ceil($length / $hlen);

        $output = "";

        for($i = 1; $i <= $block_count; $i++) {

            // $i encoded as 4 bytes, big endian.

            $last = $salt . pack("N", $i);

            // first iteration

            $last = $xorsum = hash_hmac($algo, $last, $password, true);

            // perform the other $count - 1 iterations

            for ($j = 1; $j < $iterations; $j++) {

                $xorsum ^= ($last = hash_hmac($algo, $last, $password, true));

            }

            $output .= $xorsum;

        }

        if($raw_output)

            return substr($output, 0, $length);

        else

            return substr(bin2hex($output), 0, $length);

    }

JAVA 代码：

　　/*　　
　　　　hashPassword("PBKDF2WithHmacSHA1","123456","abcdefg",1024,128);
　　*/
　　static public byte[] hashPassword(String algorithm, String password, String salt, int iterations, int len) throws Exception{

        PBEKeySpec pbeKeySpec = new PBEKeySpec(password.toCharArray(), salt.getBytes(), iterations, len);

        SecretKeyFactory kFactory=SecretKeyFactory.getInstance(algorithm);

        SecretKey secretKey = kFactory.generateSecret(pbeKeySpec);

        byte[] buff = secretKey.getEncoded();

        return buff;

    }