PHP：如何生成字符串的 HmacSHA256 签名

Question

有没有办法在php中创建一个字符串的HmacSHA256签名？

Answer 1

Use hash_hmac :

$sig = hash_hmac('sha256', $string, $secret)

Where $secret is your key.

Answer 2

The hash_hmac() function could help, here :

Generate a keyed hash value using the HMAC method

For example, the following portion of code :

$hash = hash_hmac('sha256', 'hello, world!', 'mykey');
var_dump($hash);

Gives the following output :

string '07a932dd17adc59b49561f33980ec5254688a41f133b8a26e76c611073ade89b' (length=64)

And, to get the list of hashing algorithms that can be used, see hash_algos() .

Answer 3

Here is an example of datatrans transaction signing (swiss e-payment solution) before call PSP with HMAC-SHA-256 .

Hope it could help some developers.

$hmacKey    = 30911337928580013;

$merchantId = 1100004624;
$amount     = $total * 100;
$currency   = 'EUR';
$refno      = $orderId;

// HMAC Hex to byte
$secret     = hex2bin("$hmacKey");

// Concat infos
$string     = $merchantId . $amount. $currency . $refno;

// generate SIGN
$sign       = bin2hex(hash_hmac('sha256', $string, $secret)); 

Note: the merchant ID and HMAC key are both from Datatrans documentation available here : https://admin.sandbox.datatrans.com/showcase/doc/Technical_Implementation_Guide.pdf

Answer 4

I can't answer due to lack of reputation, but @Melomans way in combination with ZPiDER's answer leads to using only

$hash       = hash_hmac('sha256', $string, $secret);

for a correct Datatrans signing

Answer 5

okay to sign your data with hash_hmach all you need is to do the following

1. get your secret key
2. choose a cipher mode or method example sha1,sha256, etc
3. create a variable that will hold your encrypted data call it whatever you like Therefore the code will look like this

 $signData= hash_hmac("sha256",$dataToBeSigned,$yourSecretKey);