Android device password hashing

hash.groovy

/**
 * Simple script to check hashed device password values. 
 * Primary user file located at /data/system/password.key
 * Other users: /data/system/users/{user-id}/password.key
 * You may also check device_policies.xml file for password type and complexity hint
 * 
 * @see DevicePolicyManagerService
 * @see LockPatternUtils
 * @see LockSettingsService
 */


import java.security.*;


private String toHex(byte[] ary) {
    final String hex = "0123456789ABCDEF";
    String ret = "";
    for (int i = 0; i < ary.length; i++) {
        ret += hex.charAt((ary[i] >> 4) & 0xf);
        ret += hex.charAt(ary[i] & 0xf);
    }
    return ret;
}

public String getSalt() {
 return Long.toHexString(-4705081500355345447); //check  /data/system/locksettings.db for user salt
}

 public String passwordToHash(String password) {
        if (password == null) {
            return null;
        }
        String algo = null;
        String hashed = null;
        try {
            byte[] saltedPassword = (password + getSalt()).getBytes();
            byte[] sha1 = MessageDigest.getInstance(algo = "SHA-1").digest(saltedPassword);
            byte[] md5 = MessageDigest.getInstance(algo = "MD5").digest(saltedPassword);
            hashed = (toHex(sha1) + toHex(md5))//.getBytes();
        } catch (NoSuchAlgorithmException e) {
            Log.w(TAG, "Failed to encode string because of missing algorithm: " + algo);
        }
        return hashed;
    }
    
println passwordToHash("yourpassword")