Java实现加盐加密算法的示例详解

String s = "12345";
String mds1 = DigestUtils.md5DigestAsHex(s.getBytes()).toString();
System.out.println(mds1);
String mds2 = DigestUtils.md5DigestAsHex(s.getBytes()).toString();
System.out.println(mds2);

public class PasswordTools {

    /**
     *加盐加密
     * @param password
     * @return 加密后的密码
     */
    public static String encrypt(String password){
        //生成盐值,使用随机字符串UUID，UUID为32位的
        String salt = UUID.randomUUID().toString().replace("-","");
        //（盐值+密码）进行MD5加密,DigestUtils.md5DigestAsHex参数为字节数组,生成一个十六进制32位的字符串
        String finalPassword = DigestUtils.md5DigestAsHex((salt+password).getBytes(StandardCharsets.UTF_8));
        //将盐值和加密的密码组合返回,最终存储到数据库中的密码
        String dbPassword = salt + "$" + finalPassword;
        return dbPassword;
    }

    /**
     * 校验密码
     * @param password
     * @param dbPassword
     * @return
     */
    public static boolean decrypt(String password,String dbPassword){
       if(StringUtils.hasLength(password) && StringUtils.hasLength(dbPassword)
               && dbPassword.length()==65 && dbPassword.contains("$")){
            String[] arr = dbPassword.split("\\$");
            String salt = arr[0];
            //根据获取的盐值生成校验的密码
            String checkPassword = salt + "$" + DigestUtils.md5DigestAsHex((salt+password).getBytes(StandardCharsets.UTF_8));
            //用校验密码与数据库保存的密码进行校验
            if(checkPassword.equals(dbPassword)){
                return true;
            }
        }
       return false;
    }

    public static void main(String[] args) {
        String dbPassword = encrypt("12345");
        System.out.println(decrypt("12345",dbPassword)); //true
        System.out.println(decrypt("45678",dbPassword)); //false
    }
}

<dependency>
	<groupId>org.springframework.boot</groupId>
	<artifactId>spring-boot-starter-security</artifactId>
</dependency>

@SpringBootApplication(exclude = {SecurityAutoConfiguration.class})
public class DemoApplication {
	public static void main(String[] args) {
		SpringApplication.run(DemoApplication.class, args);
	}
}

        BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
        String password = "123456";
        System.out.println(passwordEncoder.encode(password));
        System.out.println(passwordEncoder.encode(password));
        System.out.println(passwordEncoder.encode(password));

        BCryptPasswordEncoder passwordEncoder = new BCryptPasswordEncoder();
        String password = "123456";
        String dbPassword = passwordEncoder.encode(password);
        boolean result1 = passwordEncoder.matches(password,dbPassword); //正确的密码
        boolean result2 = passwordEncoder.matches("12345",dbPassword); //错误的密码
        System.out.println(result1);
        System.out.println(result2);