如何将Java带密钥哈希摘要函数转为PHP？输出不一致求助

Hey there! It’s super common to run into mismatched outputs between Java and PHP when dealing with keyed hashing—usually because of small, easy-to-miss differences in how each language handles encoding, algorithm names, or output formatting.

To help you fix this, I’ll walk through the most common pitfalls first, then share a matched example pair of Java/PHP code. But first, it would be even better if you could share:

• Your actual Java code snippet (especially the parts where you initialize the key, compute the hash, and format the output)
• The PHP code you’ve tried so far
• The specific hashing algorithm you’re using (e.g., HmacSHA256, HmacMD5)
• How you’re handling the secret key (is it a string converted to bytes? What character encoding are you using?)
• The output format you expect (Base64, hex string, raw bytes?)

Example: Matched Java & PHP HmacSHA256 Implementation #

Let’s use a typical scenario where we generate an HmacSHA256 hash, encode the result as Base64, and use UTF-8 encoding for all string-to-byte conversions.

Java Code

import javax.crypto.Mac;
import javax.crypto.spec.SecretKeySpec;
import java.util.Base64;

public class KeyedHashExample {
    public static void main(String[] args) throws Exception {
        String secretKey = "mySecureSecret123!";
        String inputData = "SampleDataToHash";
        String algorithm = "HmacSHA256";

        // Convert strings to bytes with UTF-8 (critical for consistency)
        byte[] keyBytes = secretKey.getBytes("UTF-8");
        byte[] dataBytes = inputData.getBytes("UTF-8");

        // Initialize HMAC instance
        Mac mac = Mac.getInstance(algorithm);
        SecretKeySpec keySpec = new SecretKeySpec(keyBytes, algorithm);
        mac.init(keySpec);

        // Compute hash and encode to Base64
        byte[] hashBytes = mac.doFinal(dataBytes);
        String finalResult = Base64.getEncoder().encodeToString(hashBytes);

        System.out.println(finalResult);
    }
}

Corresponding PHP Code

<?php
$secretKey = "mySecureSecret123!";
$inputData = "SampleDataToHash";
$algorithm = "sha256"; // PHP uses lowercase, no "Hmac" prefix

// Ensure UTF-8 encoding (PHP strings default to UTF-8, but explicit is safer)
$keyBytes = mb_convert_encoding($secretKey, 'UTF-8');
$dataBytes = mb_convert_encoding($inputData, 'UTF-8');

// Compute raw byte hash (4th parameter = true), then encode to Base64
$hashBytes = hash_hmac($algorithm, $dataBytes, $keyBytes, true);
$finalResult = base64_encode($hashBytes);

echo $finalResult . PHP_EOL;
?>

Key Alignment Points to Check #

1. Algorithm Name: Java uses HmacSHA256, while PHP expects just sha256 (lowercase, no prefix). Double-check you’re using the right mapping for your algorithm.
2. Character Encoding: Always explicitly define the encoding (like UTF-8) when converting strings to bytes. Java and PHP might use different default encodings if you don’t specify, leading to mismatched byte inputs.
3. Output Type: PHP’s hash_hmac returns a hex string by default. To match Java’s raw byte output from doFinal(), set the 4th parameter to true.
4. Key Handling: If your secret key is a binary value (not a plain string), make sure you’re reading it as raw bytes in both languages—don’t accidentally convert binary keys to strings with incorrect encoding.

If you share your specific code snippets, I can help pinpoint exactly where the mismatch is happening!

内容的提问来源于stack exchange，提问作者shashikant kuswaha