Question

I was given C# code and I’m trying to generate the equivalent SHA1 using Perl.

public string GetHashedPassword(string passkey)
{
       // Add a timestamp to the passkey and encrypt it using SHA1.
       string passkey = passkey + DateTime.UtcNow.ToString("yyyyMMddHH0000");
       using (SHA1 sha1 = new SHA1CryptoServiceProvider())
       {
              byte[] hashedPasskey =
                     sha1.ComputeHash(Encoding.UTF8.GetBytes(passkey));
              return ConvertToHex(hashedPasskey);
       }
}
private string ConvertToHex(byte[] bytes)
{
       StringBuilder hex = new StringBuilder();
       foreach (byte b in bytes)
       {
              if (b < 16)
              {
                     hex.AppendFormat("0{0:X}", b);
              }
              else
              {
                     hex.AppendFormat("{0:X}", b);
              }
       }
       return hex.ToString();
}

The same as:

use Digest::SHA1 qw( sha1_hex );
my $pass = "blahblah";
my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday,$isdst) = gmtime();
$year += 1900;
my $date = sprintf("%d%02d%02d%02d0000", $year, $mon+1, $mday, $hour);    
my $passSha1 = sha1_hex($pass.$date);
//9c55409372610f8fb3695d1c7c2e6945164a2578

I don’t actually have any C# experience so I’m not able to test what is normally outputted from the C# code.

The code is supposed to be used as a checksum for a website but the one I’m providing is failing.

Edit: it also adds the UTC timestamp (yyyyMMDDHH0000) to the end of the pass before hashing so I’ve added that code in case the issue is there.

Answer 1

I do not know C# either. However, {0:X} formats hex digits using upper case letters. So, would

my $passSha1 = uc sha1_hex($pass);

help? (Assuming GetHashedPassword makes sense.)