MD5 Hash and JCE

[B Wiley Snyder]

How can I use my own key that has already been generated elsewhere in my method to create this fingerprint below. I can only find examples online where the key is generated?

public String HMAC(String values){
    
    try {
        
        //Dont need these next two lines;I have my own key
        //KeyGenerator keyGen = KeyGenerator.getInstance("HmacMD5");
        //SecretKey key = keyGen.generateKey();
        
        SecretKey key = "FDHJKLS43290983FDJSK";//<--no compile - similiar key supplied by gateway
    
        // Create a MAC object using HMAC-MD5 and initialize with key
        Mac mac = Mac.getInstance("MD5");
        mac.init(key);
    
        // Encode the string into bytes using utf-8 and digest it
        byte[] utf8 = values.getBytes("UTF8");
        byte[] digest = mac.doFinal(utf8);
    
        // If desired, convert the digest into a string
        String digestB64 = new sun.misc.BASE64Encoder().encode(digest);
        } catch (InvalidKeyException e) {
        } catch (NoSuchAlgorithmException e) {
        } catch (UnsupportedEncodingException e) {
     }
    }

[Peter den Haan]

Confused as to what you're asking. Do you need to read an externally generated key? What format does the key come in? Have you looked at the JCE documentation in the JDK?

- Peter
[ September 08, 2004: Message edited by: Peter den Haan ]

[B Wiley Snyder]

Originally posted by Peter den Haan:
Confused as to what you're asking. Do you need to read an externally generated key? What format does the key come in? Have you looked at the JCE documentation in the JDK?

- Peter

[ September 08, 2004: Message edited by: Peter den Haan ]

Yes after studying the API for JCE I finally figured it out, took a while but i did. I had my own key, I just had to convert it to a Key and insert that into the MAC with "hmacMD5"... anyway thanks for the reply !

[B Wiley Snyder]

Originally posted by sabre tooth:
Tut Tut Wiley.

Grant gave you the information in the SUN cryptography forum!

TUT TUT? ... I cant ask a question on 2 different websites?

[ edited in accordance with our "be nice" rule -ds ]
[ September 10, 2004: Message edited by: Dirk Schreckmann ]

[Joe Ess]

Play nice, kids.

B Wiley, it is considered impolite to post a question more than once, whether it is within a single group of forums or on different websites. Doing so results in the duplication of effort on the part of the community to answer your question while other inquiries may go unanswered.

And sabre, we have few rules around this here ranch, but the Naming Policy is one of them. Your display name should be a first and last name separated by a space and not obviously fake. Please click here to fix it.

[B Wiley Snyder]

[B Wiley Snyder]

I didnt post this question twice and grant gave me the wrong answer.???

[James Sabre]

And sabre, we have few rules around this here ranch, but the Naming Policy is one of them. Your display name should be a first and last name separated by a space and not obviously fake.

Thanks for the info; I have updated my record.

[Dirk Schreckmann]

Please allow me to get the last words in regarding this squabble.

I deleted a couple of posts.

We like it when folks are friendly around these parts.

[B Wiley Snyder]

Originally posted by Dirk Schreckmann:
Please allow me to get the last words in regarding this squabble.

I deleted a couple of posts.

We like it when folks are friendly around these parts.

THANK YOU !!!

Okay, I'm getting closer to solving this problem but I'm still two characters off, I dumped the mac object and just use the digest....

public static String HMAC(String values, String myKeyString){
    String output = "";
    try {
        byte[] key = myKeyString.getBytes();
 
        
        MessageDigest md = MessageDigest.getInstance("MD5");
        md.update(key);
 
        byte[] digest = md.digest(values.getBytes("UTF-16LE"));
        StringBuffer hexString = new StringBuffer();
             for (int i=0;i<digest.length;i++) {
                 hexString.append(
                   Integer.toHexString(0xFF & digest[i]));
             }
                output = hexString.toString();
        
        } 
    //catch (InvalidKeyException e) {
        //} 
    catch (NoSuchAlgorithmException e) {
        } catch (UnsupportedEncodingException e) {
        } 
    //catch (InvalidKeySpecException e) {
        //} 
        return output;
        
       
    }

[B Wiley Snyder]

Problem solved.......

Don't try to create a HMAC-MD5 Hash algorithm to integrate with authorizenet credit card gateway (SIM) Simple Integration Method. You will never make a hash that matches theres, they don't even want you to use it, thats why they give you an out of date ASP example.

I finally just used thier (AIM) Advanced Integration Method with HttpUrlConnect and everythings peachy .

URL theUrl = new URL("https://secure.authorize.net/gateway/transact.dll");
          URLConnection connection = theUrl.openConnection();
          HttpURLConnection http = (HttpURLConnection)connection;
          http.setDoOutput(true);
          http.setRequestMethod("POST");
          OutputStream ostream = http.getOutputStream();
          String queryString = "?x_version=\"3.1\"" +
                               "&"+
                               "x_delim_data=\"true\"" +
                               "&"+
                               "x_login=\"XXXXXXXXXXXXXXXX\"" +
                               "&"+
                               "x_password=\"XXXXXXXXXXXXXXXXX\"" +
                               "&"+
                               "x_amount=\"10.50\"" +
                               "&"+
                               "x_card_num=\"4007000000027\"" +
                               "&"+
                               "x_exp_date=\"6/2007\"" +
                               "&"+
                               "x_type\"AUTH_ONLY\"";
                               
          ostream.write(queryString.getBytes());
          ostream.flush();
          ostream.close();
          http.connect();
 
          
          BufferedReader in = new BufferedReader(
          new InputStreamReader(http.getInputStream()));
 
          String inputLine;
          while ((inputLine = in.readLine()) != null){
          //System.out.println(inputLine);
          out.write(inputLine);
          }
          in.close();

they call it the Advanced method but ^&*(*&, compared to trying to match a JCE hash with there classic ASP hash its like a dream come true....

thanks for anyone who actually gave my post a thought

-peace

[Dirk Schreckmann]

Thanks for sharing what you learned.