30

How do i sha1 a string or set of numbers in Objective c?

James
  • 2,454
  • 1
  • 22
  • 22
Daniel
  • 3,017
  • 12
  • 44
  • 61
  • This question is strikingly similar to http://stackoverflow.com/questions/756492/objective-c-sample-code-for-hmac-sha1. No answers yet over there, but I post for the sake of completeness. – Eli Aug 12 '10 at 13:47
  • Is this for a particular platform? – ThomasW Apr 11 '11 at 00:58

3 Answers3

64

CommonCrypto (an Apple framework) has functions for calculating SHA-1 hashes, including a one-step hash:

#include <CommonCrypto/CommonDigest.h>

unsigned char digest[CC_SHA1_DIGEST_LENGTH];
NSData *stringBytes = [someString dataUsingEncoding: NSUTF8StringEncoding]; /* or some other encoding */
if (CC_SHA1([stringBytes bytes], [stringBytes length], digest)) {
    /* SHA-1 hash has been calculated and stored in 'digest'. */
    ...
}

For a set of numbers, let us assume you mean an array of ints of known length. For such data, it is easier to iteratively construct the digest rather than use the one-shot function:

unsigned char digest[CC_SHA1_DIGEST_LENGTH];
uint32_t *someIntegers = ...;
size_t numIntegers = ...;

CC_SHA1_CTX ctx;
CC_SHA1_Init(&ctx);
{
    for (size_t i = 0; i < numIntegers; i++)
        CC_SHA1_Update(&ctx, someIntegers + i, sizeof(uint32_t));
}
CC_SHA1_Final(digest, &ctx);

/* SHA-1 hash has been calculated and stored in 'digest'. */
...

Note that this does not take endianness into account. The SHA-1 calculated with this code on a PowerPC system will differ from the one calculated on an i386 or ARM system. The solution is simple--swap the bytes of the integers to a known endianness before doing the calculation:

    for (size_t i = 0; i < numIntegers; i++) {
        uint32_t swapped = CFSwapInt32HostToLittle(someIntegers[i]); /* or HostToBig */
        CC_SHA1_Update(&ctx, &swapped, sizeof(swapped));
    }
Jonathan Grynspan
  • 43,286
  • 8
  • 74
  • 104
4

Another solution with a message digest library (nv-ios-digest):

(1) String

// Create an SHA1 instance, update it with a string and do final.
SHA1 sha1 = [SHA1 sha1WithString:@"Hello"];

// Get the pointer of the internal buffer that holds the message digest value.
// The life of the internal buffer ends when the SHA1 instance is discarded.
// Copy the buffer as necessary. The size of the buffer can be obtained by
// 'bufferSize' method.
unsigned char *digestAsBytes = [sha1 buffer];

// Get the string expression of the message digest value.
NSString *digestAsString = [sha1 description];

(2) Numbers

// Create an SHA1 instance.
SHA1 sha1 = [[SHA1 alloc] init];

// Update the SHA1 instance with numbers.
// (Sorry, the current implementation is endianness-dependent.)
[sha1 updateWithShort:(short)1];
[sha1 updateWithInt:(int)2];
[sha1 updateWithLong:(long)3];
[sha1 updateWithLongLong:(long long)4];
[sha1 updateWithFloat:(float)5];
[sha1 updateWithDouble:(double)6];

// Do final. 'final' method returns the pointer of the internal buffer
// that holds the message digest value. 'buffer' method returns the same.
// The life of the internal buffer ends when the SHA1 instance is discarded.
// Copy the buffer as necessary. The size of the buffer can be obtained by
// 'bufferSize' method.
unsigned char *digestAsBytes = [sha1 final];

// Get the string expression of the message digest value.
NSString *digestAsString = [sha1 description];

The message digest library supports MD5, SHA-1, SHA-224, SHA-256, SHA-384 and SHA-512.

[Blog] Message digests (MD5, SHA1, etc.) on iOS with dedicated classes
http://darutk-oboegaki.blogspot.jp/2013/04/message-digests-md5-sha1-etc-on-ios.html

[Library] nv-ios-digest
https://github.com/TakahikoKawasaki/nv-ios-digest

Takahiko Kawasaki
  • 18,118
  • 9
  • 62
  • 105
2

SHA1 doesn't actually come with Objective-C. You can use the C source code for hashdeep and friends, which is licensed under the public domain (Because it was written by an employee of the United States government): http://md5deep.sourceforge.net/ .

Billy ONeal
  • 104,103
  • 58
  • 317
  • 552
  • Another option would be libgcrypt, from the makers of GnuPG (http://www.gnupg.org/related_software/libraries.en.html#lib-libgcrypt). – schot Aug 12 '10 at 13:53
  • Is there any secure encryption that is supported directly for obj c and php? – Daniel Aug 12 '10 at 13:54
  • 1
    @schot: But libcrypt has a much more restrictive license. @Daniel: Not out of the box, no. Objective-C does not come with much in the way of libraries. – Billy ONeal Aug 12 '10 at 14:12
  • CommonCrypto, which includes SHA1, is included with iOS as mentioned in the checked answer. – ThomasW Apr 10 '11 at 15:23
  • @ThomasW: Objective-C != iOS. The language is perfectly usable on any platform, even if Mac is the most common of the platforms where it is used. – Billy ONeal Apr 10 '11 at 16:39
  • Yes, but the vast vast vast majority of developers with any interest in Objective-C are interested in iOS or Mac development. `std::string` isn't a mandated part of C++ but there's nary a C++ developer out there who avoids it. – Jonathan Grynspan Apr 10 '11 at 17:34
  • @Jonathan: Actually, `std::string` **is** a mandated part of the C++ standard. Apple's libraries are not part of the Objective-C standard. If the OP wanted to talk about Apple's libraries, then he should have noted that in the question. – Billy ONeal Apr 10 '11 at 17:56
  • 2
    He also didn't note he was working with a Turing-complete system. It's assumed. – Jonathan Grynspan Apr 10 '11 at 22:33
  • @Jonathan: The Objective-C standard mandates a Turing complete system. It does not mandate Apple's libraries. We have an iOS tag here for a reason. – Billy ONeal Apr 10 '11 at 22:39
  • The author has clarified that he's looking for a Mac OS X solution. – ThomasW Apr 11 '11 at 11:22