19

So I'm trying to figure out how to do a hmacshad256 hash on ios as that's the hash I did for the wcf service api I made. I've been trying to look for some info about it but would usually just end up getting a SHA-256 hash.

This is the only reference I have:

Need to generate HMAC SHA256 hash in Objective C as in Java

And I'm not sure if that's the only way to do it (importing a java hmac class)

Any help is appreciated.

Thanks!

2

3 Answers 3

36
NSString * parameters = @"string to hash"
NSString *salt = @"saltStringHere";
NSData *saltData = [salt dataUsingEncoding:NSUTF8StringEncoding];
NSData *paramData = [parameters dataUsingEncoding:NSUTF8StringEncoding];
NSMutableData* hash = [NSMutableData dataWithLength:CC_SHA256_DIGEST_LENGTH ];
CCHmac(kCCHmacAlgSHA256, saltData.bytes, saltData.length, paramData.bytes, paramData.length, hash.mutableBytes);
NSString *base64Hash = [hash base64Encoding];

and also

#import <CommonCrypto/CommonHMAC.h>

Since base64Encoding is deprecated from iOS 7.0, the last line should be:

NSString *base64Hash = [hash base64EncodedStringWithOptions:0];
4
  • 2
    The selector now would be -base64EncodedStringWithOptions:
    – ff10
    Feb 16, 2014 at 21:19
  • 1
    Please edit your answer, and write that we need to add #import "NSData+Base64.h"
    – SteBra
    Jun 17, 2014 at 9:26
  • 1
    @Stebra Well, you don't need to import NSData+Base64.h. You can put this fragment of code anywhere you want. But it is true that having category extending NSData is perhaps the best way to do it. Jun 18, 2014 at 8:02
  • 1
    Since salts are usually public, this may be misleading. It's actually the secret key you should use there!
    – Raphael
    Jun 6, 2017 at 12:09
8

Here is the solution I'm submitting that I put together from other answers on the matter:

This is easily adapted to other hash types by changing CC_SHA256_DIGEST_LENGTH and kCCHmacAlgSHA256.

If you're interested in doing that, check out the CommonDigest.h file within the CommonCrypto library.

#import <Foundation/Foundation.h>
#import <CommonCrypto/CommonCrypto.h>

+ (NSString *)hmac:(NSString *)plaintext withKey:(NSString *)key
{
    const char *cKey  = [key cStringUsingEncoding:NSASCIIStringEncoding];
    const char *cData = [plaintext cStringUsingEncoding:NSASCIIStringEncoding];
    unsigned char cHMAC[CC_SHA256_DIGEST_LENGTH];
    CCHmac(kCCHmacAlgSHA256, cKey, strlen(cKey), cData, strlen(cData), cHMAC);
    NSData *HMACData = [NSData dataWithBytes:cHMAC length:sizeof(cHMAC)];
    const unsigned char *buffer = (const unsigned char *)[HMACData bytes];
    NSMutableString *HMAC = [NSMutableString stringWithCapacity:HMACData.length * 2];
    for (int i = 0; i < HMACData.length; ++i){
        [HMAC appendFormat:@"%02x", buffer[i]];
    }

    return HMAC;
}

This has been tested on iOS 8.x and iOS 7.x

4
  • 2
    This assumes that the plaintext and key are ASCII, that is very restrictive in today's environment of many languages and even emoji. Notice that @Juraj Antas did not need char array. The only thing that this implementation offers is hex output instead of Base64, it would be worth mentioning that at the top of the answer.
    – zaph
    Jun 24, 2015 at 19:54
  • Thanks Zaph. Yeah, in my case, I know they are. Sep 2, 2015 at 13:35
  • 4
    This is an answer so "in my case" does not apply. Instead of using NSASCIIStringEncoding just use NSUTF8StringEncoding.
    – zaph
    Sep 2, 2015 at 13:42
  • stackoverflow.com/users/451475/zaph, as this method currently is, even with replacing the NSASCIIStringEncoding with NSUTF8StringEncoding it returns the wrong hash using high ASCII characters, like these: ¥€£•‹›. Am working on a fix. Jun 6, 2017 at 18:48
1

+ (NSString *)hmacSHA256EncryptString{


    NSString * parameterSecret = @"input secret key";
    NSString *plainString = @"input encrypt content string";
    const char *secretKey  = [parameterSecret cStringUsingEncoding:NSUTF8StringEncoding];
    const char *plainData = [plainString cStringUsingEncoding:NSUTF8StringEncoding];
    unsigned char cHMAC[CC_SHA256_DIGEST_LENGTH];
    CCHmac(kCCHmacAlgSHA256, secretKey, strlen(secretKey), plainData, strlen(plainData), cHMAC);
    NSData *HMACData = [NSData dataWithBytes:cHMAC length:sizeof(cHMAC)];
    const unsigned char *bufferChar = (const unsigned char *)[HMACData bytes];
    NSMutableString *hmacString = [NSMutableString stringWithCapacity:HMACData.length * 2];
    for (int i = 0; i < HMACData.length; ++i){
        [hmacString appendFormat:@"%02x", bufferChar[i]];
    }
    return hmacString;
    
}

0

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.