如何调用HashPassword并将用户密码存储到数据库？

Question

我正在使用SHA1CryptoServiceProvider（）设置HashPassword函数。我的要求包括两种方法：生成我需要帮助的salt和初始化器。

Salt与IV一起使用，用于在密码被散列之前对密码进行加密，以及用于验证的密码。初始化程序获取salt生成器生成的字符串，它将密码和salt混合到一个字符串中，并将任何多余的字符添加到结尾，然后散列混合密码并返回值。

本质上，我需要比较视图发送的值是否与原始值不同，如果确实如此，我需要在create（新记录）上重新生成散列和初始化器。

此控制器操作调用USERController.Helper文件中的HashPassword函数。

    public ActionResult HashPassword(USERSModel UsersModel)
    
        USERDto dto = new USERDto();

        if (ModelState.IsValid)
        
            string hashedPassword = UsersModel.PASSWORD;
            UsersModel.PASSWORD = hashedPassword;
            dto.Updated.Add(hashedPassword);
            dto.Updated.Add("NAME");
            dto.Updated.Add("ID");
            dto.Updated.Add("PASSWORD");
            UsersModel.Updated.SaveChanges();

            ViewBag.Message = "User was added successfully!";
            UsersModel = new USERSModel();

        
        else
            ViewBag.message = "Error in adding User!";


        return View("USERSSettingsPartial", UsersModel);
    

 /// <summary>
    /// Called to hash a user password to be stored in the DB.
    /// </summary>
    /// <param name="password">The password to validate.</param>
    /// <param name="salt">The IV used to salt the password before it is hashed.</param>
    /// <param name="errorDesc">Returns an error description if an error occurs.</param>
    /// <returns>Returns the hashed password as a HEX string on success, otherwise returns null.</returns>

        private string HashPassword(string password, byte[] salt, ref string errorDesc)
        
            try
            
                byte[] newPassword = Encoding.ASCII.GetBytes(password.ToUpper());
                if (salt != null && salt.Length > 0)
                
                    int count = (salt.Length < newPassword.Length) ? salt.Length : newPassword.Length;
                    byte[] temp = new byte[salt.Length + newPassword.Length];
                    for (int index = 0; index < count; index++)
                    
                        temp[index * 2] = newPassword[index];
                        temp[index * 2 + 1] = salt[index];
                    
                    if (count == salt.Length && count < newPassword.Length)
                        Buffer.BlockCopy(newPassword, count, temp, count * 2, newPassword.Length - count);
                    else if (count == newPassword.Length && count < salt.Length)
                        Buffer.BlockCopy(salt, count, temp, count * 2, salt.Length - count);

                    newPassword = temp;
                
                using (var hash = new System.Security.Cryptography.SHA1CryptoServiceProvider())
                
                    hash.ComputeHash(newPassword);
                    return this.GetHexStringFromBytes(hash.Hash);
                
            
            catch (Exception Ex)
            
                errorDesc = Ex.Message;
                if (Ex.InnerException != null) errorDesc = string.Format("0\r\n1", errorDesc, Ex.InnerException.Message);
            
            return null;
        

        /// <summary>
        /// called to convert byte data into hexidecimal string were each byte is represented as two hexidecimal characters.
        /// </summary>
        /// <param name="data">Byte data to convert.</param>
        /// <returns>A hexidecimal string version of the data.</returns>
        private string GetHexStringFromBytes(byte[] data)
        
            if (data == null || data.Length == 0) return string.Empty;

            StringBuilder sbHex = new StringBuilder();
            for (int index = 0; index < data.Length; index++) sbHex.AppendFormat(null, "0:X2", data[index]);

            return sbHex.ToString();
        

        /// <summary>
        /// called to convert hexadecimal string into byte data were two hexadecimal characters are converted into a byte.
        /// </summary>
        /// <param name="hexString">A hexidecimal string to convert</param>
        /// <returns>The converted byte data.</returns>
        private byte[] GetBytesFromHexString(string hexString)
        
            if (string.IsNullOrEmpty(hexString)) return null;

            byte[] data = new byte[hexString.Length / 2];
            for (int index = 0; index < data.Length; index++)
            
                data[index] = byte.Parse(hexString.Substring(index * 2, 2), System.Globalization.NumberStyles.AllowHexSpecifier);
            
            return data;

这是我第一次使用这样的项目，因此我没有任何输出。只需要举例来更好地理解。