对如何在C#中实现来自javascript的HMACSHA1感到困惑

Question

我正在使用crypto-js库为我的javascript代码实现HMACSHA1

代码看起来像这个

const hash1 = require("crypto-js");
let signature = "application_id=3610&auth_key=aDRceQyTXSYEdJU&nonce=6304033672&timestamp=1623098533&user[login]=[e-mail]&user[password]=123456789"
let key = "dBV2PdhYMnruSMb"
let hash = hash1.HmacSHA1(signature, key).toString()
console.log(hash)
//which prints 
467280c4cb82fc97bd04c51d8a846446ad6e82e1

这在javascript中显然非常容易。但后来我尝试在c#中使用相同的字符串和键，结果它打印出了一个完全不同的字符串。我迷路了，不知道如何解决这个问题。

以下是我在C#中实现这一点的尝试

string signSession = "application_id=3610&auth_key=aDRceQyTXSYEdJU&nonce=6304033672&timestamp=1623098533&user[login]=[e-mail]&user[password]=123456789"
string key = "dBV2PdhYMnruSMb="
//convert the session signature string to a byte array
byte[] signature = Encoding.UTF8.GetBytes(signSession.ToString());
var apiKey = Convert.FromBase64String(key);

//Generate a HMACSHA1 signature
using(HMACSHA1 hmac = new HMACSHA1(apiKey))
{
byte[] signatureBytes = hmac.ComputeHash(signature);
string base64Signature = Convert.ToBase64String(signatureBytes);
Console.WriteLine(base64Signature);
session.Signature = base64Signature;
}
//And this prints 
sztTnSTv2xvuA7pPXxk2cKMP0Eo=
//which is wrong. It should be the same as the javascript result

我不确定我在这里做错了什么，我的C#实现是对的吗？

Answer 1

您的key不同。crypto-js需要一个字符串，而C#需要一个字节数组。您不应该使用FromBase64String()，而应该使用Encoding.UTF8.GetBytes()。正如@jps在评论中提到的那样

当然不同，您的JS实现有一个十六进制编码输出，但在C#实现中，您对后果

您应该将字节数组转换为类似的十六进制字符串

string signSession = "application_id=3610&auth_key=aDRceQyTXSYEdJU&nonce=6304033672&timestamp=1623098533&user[login]=[e-mail]&user[password]=123456789";
string key = "dBV2PdhYMnruSMb";
//convert the session signature string to a byte array
byte[] signature = Encoding.UTF8.GetBytes(signSession);
var apiKey = Encoding.UTF8.GetBytes(key);
//Generate a HMACSHA1 signature
using (HMACSHA1 hmac = new HMACSHA1(apiKey))
{
byte[] signatureBytes = hmac.ComputeHash(signature);
string hexSignature = BitConverter.ToString(signatureBytes).ToLowerInvariant().Replace("-", "");
Console.WriteLine(hexSignature);
session.Signature = hexSignature;
}