{"id":70188,"date":"2026-02-01T15:37:03","date_gmt":"2026-02-01T07:37:03","guid":{"rendered":"https:\/\/www.wsisp.com\/helps\/70188.html"},"modified":"2026-02-01T15:37:03","modified_gmt":"2026-02-01T07:37:03","slug":"android-%e4%b8%ad%e5%ae%9e%e7%8e%b0-hmac-sha256","status":"publish","type":"post","link":"https:\/\/www.wsisp.com\/helps\/70188.html","title":{"rendered":"Android \u4e2d\u5b9e\u73b0 HMAC-SHA256"},"content":{"rendered":"

\u6309\u6307\u5b9a\u683c\u5f0f\u62fc\u63a5\u539f\u59cb\u5b57\u7b26\u4e32\u3001UTF-8\u7f16\u7801\u3001HMAC-SHA256\u52a0\u5bc6\u3001\u8f6c\u5341\u516d\u8fdb\u5236\u5b57\u7b26\u4e32，（\u517c\u5bb9Java 8+，Android\/\u540e\u7aef\u901a\u7528），\u5e76\u505a\u597d\u5f02\u5e38\u5904\u7406\u548c\u6ce8\u91ca，\u76f4\u63a5\u590d\u5236\u5c31\u80fd\u7528\u3002<\/p>\n

\u6838\u5fc3\u8bf4\u660e<\/h4>\n

Java\u4e2d\u5b9e\u73b0HMAC-SHA256\u9700\u8981\u7528\u5230javax.crypto\u5305\u4e0b\u7684Mac\u7c7b，\u5341\u516d\u8fdb\u5236\u8f6c\u6362\u9700\u8981\u624b\u52a8\u5b9e\u73b0（Java\u65e0\u539f\u751f\u76f4\u63a5\u8f6c\u7684\u65b9\u6cd5），\u540c\u65f6\u8981\u5904\u7406\u5b57\u7b26\u7f16\u7801\u548c\u52a0\u5bc6\u5f02\u5e38，\u4ee5\u4e0b\u662f\u5b8c\u6574\u5b9e\u73b0\u3002<\/p>\n

\u5b8c\u6574Java\u4ee3\u7801（\u76f4\u63a5\u53ef\u7528）<\/h3>\n

\u5305\u542b\u7b7e\u540d\u8ba1\u7b97\u6838\u5fc3\u65b9\u6cd5+\u5341\u516d\u8fdb\u5236\u8f6c\u6362\u5de5\u5177\u65b9\u6cd5+\u5f02\u5e38\u5904\u7406+\u6d4b\u8bd5\u793a\u4f8b：<\/p>\n

import<\/span> javax.<\/span>crypto.<\/span><\/span>Mac<\/span>;<\/span>
\nimport<\/span> javax.<\/span>crypto.<\/span>spec.<\/span><\/span>SecretKeySpec<\/span>;<\/span>
\nimport<\/span> java.<\/span>nio.<\/span>charset.<\/span><\/span>StandardCharsets<\/span>;<\/span>
\nimport<\/span> java.<\/span>security.<\/span><\/span>InvalidKeyException<\/span>;<\/span>
\nimport<\/span> java.<\/span>security.<\/span><\/span>NoSuchAlgorithmException<\/span>;<\/span><\/p>\n

\/**
\n * \u8bbe\u5907\u767b\u5f55\u7b7e\u540d\u8ba1\u7b97\u5de5\u5177
\n * \u5b9e\u73b0\u7684HMAC-SHA256\u7b7e\u540d\u903b\u8f91，\u683c\u5f0f：dev={dev}&timestamp={timestamp}&nonce={nonce}&secret={secretKey}
\n *\/<\/span>
\npublic<\/span> class<\/span> DeviceSignUtil<\/span> {<\/span><\/p>\n

\/\/ \u52a0\u5bc6\u7b97\u6cd5：HMAC-SHA256<\/span>
\n private<\/span> static<\/span> final<\/span> String<\/span> HMAC_SHA256_ALGORITHM =<\/span> "HmacSHA256"<\/span>;<\/span>
\n \/\/ \u5341\u516d\u8fdb\u5236\u5b57\u7b26\u96c6（\u56fa\u5b9a）<\/span>
\n private<\/span> static<\/span> final<\/span> char<\/span>[<\/span>]<\/span> HEX_CHARS =<\/span> "0123456789abcdef"<\/span>.<\/span>toCharArray<\/span>(<\/span>)<\/span>;<\/span><\/p>\n

\/**
\n * \u8ba1\u7b97\u8bbe\u5907\u767b\u5f55HMAC-SHA256\u7b7e\u540d
\n * @param dev \u8bbe\u5907\u53f7
\n * @param timestamp \u65f6\u95f4\u6233（\u6574\u578b）
\n * @param nonce \u968f\u673a\u4e32
\n * @param secretKey \u79d8\u94a5
\n * @return \u5341\u516d\u8fdb\u5236\u7b7e\u540d\u5b57\u7b26\u4e32（\u5c0f\u5199）
\n * @throws NoSuchAlgorithmException \u7b97\u6cd5\u4e0d\u5b58\u5728\u5f02\u5e38（\u7406\u8bba\u4e0a\u4e0d\u4f1a\u51fa\u73b0）
\n * @throws InvalidKeyException \u79d8\u94a5\u65e0\u6548\u5f02\u5e38
\n *\/<\/span>
\n public<\/span> static<\/span> String<\/span> calculateDeviceSignature<\/span>(<\/span>String<\/span> dev,<\/span> long<\/span> timestamp,<\/span> String<\/span> nonce,<\/span> String<\/span> secretKey)<\/span>
\n throws<\/span> NoSuchAlgorithmException<\/span>,<\/span> InvalidKeyException<\/span> {<\/span>
\n \/\/ 1. \u4e25\u683c\u6309\u683c\u5f0f\u62fc\u63a5\u539f\u59cb\u5b57\u7b26\u4e32（\u6ce8\u610f\u53c2\u6570\u540d\u62fc\u5199：nonce\/secret）<\/span>
\n String<\/span> rawStr =<\/span> String<\/span>.<\/span>format<\/span>(<\/span>"dev=%s&timestamp=%d&nonce=%s&secret=%s"<\/span>,<\/span>
\n dev,<\/span> timestamp,<\/span> nonce,<\/span> secretKey)<\/span>;<\/span><\/p>\n

\/\/ 2. \u5c06\u5b57\u7b26\u4e32\u548c\u79d8\u94a5\u7f16\u7801\u4e3aUTF-8\u5b57\u8282\u6570\u7ec4<\/span>
\n byte<\/span>[<\/span>]<\/span> rawBytes =<\/span> rawStr.<\/span>getBytes<\/span>(<\/span>StandardCharsets<\/span>.<\/span>UTF_8)<\/span>;<\/span>
\n byte<\/span>[<\/span>]<\/span> secretBytes =<\/span> secretKey.<\/span>getBytes<\/span>(<\/span>StandardCharsets<\/span>.<\/span>UTF_8)<\/span>;<\/span><\/p>\n

\/\/ 3. \u521d\u59cb\u5316HMAC-SHA256\u52a0\u5bc6\u5668<\/span>
\n SecretKeySpec<\/span> secretKeySpec =<\/span> new<\/span> SecretKeySpec<\/span>(<\/span>secretBytes,<\/span> HMAC_SHA256_ALGORITHM)<\/span>;<\/span>
\n Mac<\/span> mac =<\/span> Mac<\/span>.<\/span>getInstance<\/span>(<\/span>HMAC_SHA256_ALGORITHM)<\/span>;<\/span>
\n mac.<\/span>init<\/span>(<\/span>secretKeySpec)<\/span>;<\/span><\/p>\n

\/\/ 4. \u8ba1\u7b97HMAC-SHA256\u5e76\u8f6c\u5341\u516d\u8fdb\u5236\u5b57\u7b26\u4e32<\/span>
\n byte<\/span>[<\/span>]<\/span> signBytes =<\/span> mac.<\/span>doFinal<\/span>(<\/span>rawBytes)<\/span>;<\/span>
\n return<\/span> bytesToHex<\/span>(<\/span>signBytes)<\/span>;<\/span>
\n }<\/span><\/p>\n

\/**
\n * \u5b57\u8282\u6570\u7ec4\u8f6c\u5341\u516d\u8fdb\u5236\u5b57\u7b26\u4e32（\u5c0f\u5199）
\n * @param bytes \u52a0\u5bc6\u540e\u7684\u5b57\u8282\u6570\u7ec4
\n * @return \u5341\u516d\u8fdb\u5236\u5c0f\u5199\u5b57\u7b26\u4e32
\n *\/<\/span>
\n private<\/span> static<\/span> String<\/span> bytesToHex<\/span>(<\/span>byte<\/span>[<\/span>]<\/span> bytes)<\/span> {<\/span>
\n char<\/span>[<\/span>]<\/span> result =<\/span> new<\/span> char<\/span>[<\/span>bytes.<\/span>length *<\/span> 2<\/span>]<\/span>;<\/span>
\n for<\/span> (<\/span>int<\/span> i =<\/span> 0<\/span>;<\/span> i <<\/span> bytes.<\/span>length;<\/span> i++<\/span>)<\/span> {<\/span>
\n int<\/span> val =<\/span> bytes[<\/span>i]<\/span> &<\/span> 0xFF<\/span>;<\/span> \/\/ \u6d88\u9664\u7b26\u53f7\u4f4d\u5f71\u54cd<\/span>
\n result[<\/span>i *<\/span> 2<\/span>]<\/span> =<\/span> HEX_CHARS[<\/span>val >>><\/span> 4<\/span>]<\/span>;<\/span> \/\/ \u9ad84\u4f4d<\/span>
\n result[<\/span>i *<\/span> 2<\/span> +<\/span> 1<\/span>]<\/span> =<\/span> HEX_CHARS[<\/span>val &<\/span> 0x0F<\/span>]<\/span>;<\/span> \/\/ \u4f4e4\u4f4d<\/span>
\n }<\/span>
\n return<\/span> new<\/span> String<\/span>(<\/span>result)<\/span>;<\/span>
\n }<\/span><\/p>\n

\/\/ \u6d4b\u8bd5\u793a\u4f8b（\u53ef\u76f4\u63a5\u8fd0\u884c\u9a8c\u8bc1）<\/span>
\n public<\/span> static<\/span> void<\/span> main<\/span>(<\/span>String<\/span>[<\/span>]<\/span> args)<\/span> {<\/span>
\n try<\/span> {<\/span>
\n \/\/ \u6d4b\u8bd5\u53c2\u6570<\/span>
\n String<\/span> dev =<\/span> "DEVICE123456"<\/span>;<\/span>
\n long<\/span> timestamp =<\/span> 1735689600<\/span>;<\/span>
\n String<\/span> nonce =<\/span> "abcdefg1234567"<\/span>;<\/span>
\n String<\/span> secretKey =<\/span> "myDeviceSecret123"<\/span>;<\/span><\/p>\n

\/\/ \u8ba1\u7b97\u7b7e\u540d<\/span>
\n String<\/span> signature =<\/span> calculateDeviceSignature<\/span>(<\/span>dev,<\/span> timestamp,<\/span> nonce,<\/span> secretKey)<\/span>;<\/span>
\n System<\/span>.<\/span>out.<\/span>println<\/span>(<\/span>"\u8bbe\u5907\u7b7e\u540d\u7ed3\u679c："<\/span> +<\/span> signature)<\/span>;<\/span>
\n }<\/span> catch<\/span> (<\/span>Exception<\/span> e)<\/span> {<\/span>
\n e.<\/span>printStackTrace<\/span>(<\/span>)<\/span>;<\/span>
\n }<\/span>
\n }<\/span>
\n}<\/span><\/p>\n

\u5f02\u5e38\u5904\u7406\u8bf4\u660e<\/h3>\n

Java\u52a0\u5bc6\u76f8\u5173\u65b9\u6cd5\u4f1a\u629b\u51fa\u53d7\u68c0\u5f02\u5e38，\u9700\u624b\u52a8\u6355\u83b7\/\u58f0\u660e，\u4e3b\u8981\u5f02\u5e38：<\/p>\n