CODEWITHSUNDEEP
c#asp.netsql-server
el ninho
el ninho

Reputation: 4233

Compare SHA2_512 C# and SQL Server

I want to compare password when user logins from ASP.NET Site to One I generated for him in SQL Server.

So, I generate password field in SQL server like this:

insert into users 
select 'username',  HASHBYTES('SHA2_512', CONVERT(nvarchar(4000),'password'))

And code in C#:

string text = Password;
            SHA512 alg = SHA512.Create();
            byte[] result = alg.ComputeHash(Encoding.UTF8.GetBytes(text));
            string hash = Encoding.UTF8.GetString(result);

And those two hashes are very different.

Where am I wrong?

Upvotes: 1

Views: 1612

Answers (1)

Marcelo Cantos
Marcelo Cantos

Reputation: 185902

NVARCHAR is a 16-bit encoding — most likely little-endian UTF-16. HASHBYTES is therefore probably seeing a different input to ComputeHash.

Try Encoding.Unicode.

Also, don't use Encoding to convert result to a string. It contains raw bytes, not encodings of characters. If you want a string, convert the bytes to hex digits or Base64.

Upvotes: 1

Related Questions