Online SHA1 Hash Generator

I'm trying to implement my own PHP function to generate codes for Google Authenticator. I do it for fun and to learn something new. Here's what I did:

function twoFactorAuthorizationCode(string $secretBase32, int $digitsCount): string {    $counter = (int) (time() / 30);    $secret = Base32::decode($secretBase32);    $hash = hash_hmac('sha1', $counter, $secret, true); // 20 binary characters    $hexHash = unpack('H*', $hash)[1]; // 40 hex characters    $offset = hexdec($hexHash[-1]); // last 4 bits of $hash    $truncatedHash = hexdec(substr($hexHash, $offset * 2, 8)) & 0x7fffffff; // last 31 bits    $code = $truncatedHash % (10 ** $digitsCount);    return str_pad($code, $digitsCount, '0', STR_PAD_LEFT);}

I'm not sure which step is wrong, but it doesn't generate the same results as Google Authenticator. Obviously, I tried to play with time offsets in case my clock is not in sync with Google Authenticator's.

Some of the things I'm not sure are:

• Should the secret be decoded from Base32, or should it stay the Base32 string?
• Is the counter a value or a key for SHA1 hash?

I did a lot of experiments and I can't get my algorithm to generate a valid result. Any advice is highly appreciated.

I found this c++ implementation of SHA1 on this page zedwood.com. Why doesn't the this function work. It says that max has to be a constant. How to get around this problem?

void SHA1::read(std::istream &is, std::string &s, int max){char sbuf[max];is.read(sbuf, max);s.assign(sbuf, is.gcount());}``

How can I create a SHA1 from a NSString.

Let's say the NSString is set up as:

NSString *message = @"Message";

I can use PHP to create a SHA1 hash with sha($message). But unfortunately it doesn't work like that within Objective-C.

According to this site mysql uses:

SHA1(UNHEX(SHA1("this_is_a_random_string")))

To generate its password() hash.

...

I have copied this function, from another StackOverflow post:

- (NSString *)sha1:(NSString *)str {    const char *cStr = [str UTF8String];    unsigned char result[CC_SHA1_DIGEST_LENGTH];    CC_SHA1(cStr, strlen(cStr), result);    NSString *s = [NSString  stringWithFormat:                  @"%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X%02X",                  result[0], result[1], result[2], result[3], result[4],                  result[5], result[6], result[7],                  result[8], result[9], result[10], result[11], result[12],                  result[13], result[14], result[15],                  result[16], result[17], result[18], result[19]                  ];    return s;}

To generate sh1 hashes. But as the first link says:

the second SHA1() is applied to the binary data returned by the first SHA1() and not to its hex representation. Therefore in SQL I have to UNHEX() it before applying the second SHA1.

So I have to do something like:

NSString * a = [self sha1:@"abc"];// convert a into binary data.NSString * b = [self:sha1:a];

But whatever I try I cannot get it to work.

What is the simplest way to do this?

I'm new in PHP, and I have a big problem and make me stress,Im encrypt my column password with SHA1 in database. and in my column password have a lot of password.

but not all password can login in my apps, for example i have password

1. 9Wg-9Vk+ (succes Login)
2. 1Qb"8Tc$ (Login Failed)
3. 9Qz&3Kd$ (Login Failed)
4. 4Ao'5Al' (Login Failed)

When i analysis thats password, i think the problem is symbol like " ' and & cannot detect in my code.

So, sha1($pass) == $passwd, not execute. I Think

Or anyone have any idea ?

This is my code.

if (isset($_POST['user']) && isset($_POST['pass'])) {$user = val_input(mysqli_real_escape_string($conn, filter_input(INPUT_POST,'user',FILTER_SANITIZE_EMAIL)));//($_POST['user'])));$pass = val_input(mysqli_real_escape_string($conn, filter_input(INPUT_POST,'pass', FILTER_SANITIZE_STRING)));// val_input($_POST['pass'])));$userpas = $conn->query("SELECT * FROM userid WHERE email = '".$user."' && password = '".sha1($pass)."' ");//$cekuser = mysqli_num_rows($conn, $userpas);$login = $userpas->fetch_object();if(isset($login->email) && $login->email == $user) {            $idusers = $login->username;            $usernm = $login->email;            $passwd = $login->password;            $groups = $login->kriteria;            $verikasicode = $login->verifikasicode;            $verifikasistatus = $login->verifikasistatus;        if (($user == $usernm) && (sha1($pass) == $passwd) &&                ($verikasicode == 'verified') && ($verifikasistatus == '1')) {                $msg('Success Login')                exit;        } else {                $msg = 'Failed Login';        }} else {     $msg = 'Failed Login';}