You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
289 lines
7.8 KiB
289 lines
7.8 KiB
/** |
|
* Message Digest Algorithm 5 with 128-bit digest (MD5) implementation. |
|
* |
|
* @author Dave Longley |
|
* |
|
* Copyright (c) 2010-2014 Digital Bazaar, Inc. |
|
*/ |
|
var forge = require('./forge'); |
|
require('./md'); |
|
require('./util'); |
|
|
|
var md5 = module.exports = forge.md5 = forge.md5 || {}; |
|
forge.md.md5 = forge.md.algorithms.md5 = md5; |
|
|
|
/** |
|
* Creates an MD5 message digest object. |
|
* |
|
* @return a message digest object. |
|
*/ |
|
md5.create = function() { |
|
// do initialization as necessary |
|
if(!_initialized) { |
|
_init(); |
|
} |
|
|
|
// MD5 state contains four 32-bit integers |
|
var _state = null; |
|
|
|
// input buffer |
|
var _input = forge.util.createBuffer(); |
|
|
|
// used for word storage |
|
var _w = new Array(16); |
|
|
|
// message digest object |
|
var md = { |
|
algorithm: 'md5', |
|
blockLength: 64, |
|
digestLength: 16, |
|
// 56-bit length of message so far (does not including padding) |
|
messageLength: 0, |
|
// true message length |
|
fullMessageLength: null, |
|
// size of message length in bytes |
|
messageLengthSize: 8 |
|
}; |
|
|
|
/** |
|
* Starts the digest. |
|
* |
|
* @return this digest object. |
|
*/ |
|
md.start = function() { |
|
// up to 56-bit message length for convenience |
|
md.messageLength = 0; |
|
|
|
// full message length (set md.messageLength64 for backwards-compatibility) |
|
md.fullMessageLength = md.messageLength64 = []; |
|
var int32s = md.messageLengthSize / 4; |
|
for(var i = 0; i < int32s; ++i) { |
|
md.fullMessageLength.push(0); |
|
} |
|
_input = forge.util.createBuffer(); |
|
_state = { |
|
h0: 0x67452301, |
|
h1: 0xEFCDAB89, |
|
h2: 0x98BADCFE, |
|
h3: 0x10325476 |
|
}; |
|
return md; |
|
}; |
|
// start digest automatically for first time |
|
md.start(); |
|
|
|
/** |
|
* Updates the digest with the given message input. The given input can |
|
* treated as raw input (no encoding will be applied) or an encoding of |
|
* 'utf8' maybe given to encode the input using UTF-8. |
|
* |
|
* @param msg the message input to update with. |
|
* @param encoding the encoding to use (default: 'raw', other: 'utf8'). |
|
* |
|
* @return this digest object. |
|
*/ |
|
md.update = function(msg, encoding) { |
|
if(encoding === 'utf8') { |
|
msg = forge.util.encodeUtf8(msg); |
|
} |
|
|
|
// update message length |
|
var len = msg.length; |
|
md.messageLength += len; |
|
len = [(len / 0x100000000) >>> 0, len >>> 0]; |
|
for(var i = md.fullMessageLength.length - 1; i >= 0; --i) { |
|
md.fullMessageLength[i] += len[1]; |
|
len[1] = len[0] + ((md.fullMessageLength[i] / 0x100000000) >>> 0); |
|
md.fullMessageLength[i] = md.fullMessageLength[i] >>> 0; |
|
len[0] = (len[1] / 0x100000000) >>> 0; |
|
} |
|
|
|
// add bytes to input buffer |
|
_input.putBytes(msg); |
|
|
|
// process bytes |
|
_update(_state, _w, _input); |
|
|
|
// compact input buffer every 2K or if empty |
|
if(_input.read > 2048 || _input.length() === 0) { |
|
_input.compact(); |
|
} |
|
|
|
return md; |
|
}; |
|
|
|
/** |
|
* Produces the digest. |
|
* |
|
* @return a byte buffer containing the digest value. |
|
*/ |
|
md.digest = function() { |
|
/* Note: Here we copy the remaining bytes in the input buffer and |
|
add the appropriate MD5 padding. Then we do the final update |
|
on a copy of the state so that if the user wants to get |
|
intermediate digests they can do so. */ |
|
|
|
/* Determine the number of bytes that must be added to the message |
|
to ensure its length is congruent to 448 mod 512. In other words, |
|
the data to be digested must be a multiple of 512 bits (or 128 bytes). |
|
This data includes the message, some padding, and the length of the |
|
message. Since the length of the message will be encoded as 8 bytes (64 |
|
bits), that means that the last segment of the data must have 56 bytes |
|
(448 bits) of message and padding. Therefore, the length of the message |
|
plus the padding must be congruent to 448 mod 512 because |
|
512 - 128 = 448. |
|
|
|
In order to fill up the message length it must be filled with |
|
padding that begins with 1 bit followed by all 0 bits. Padding |
|
must *always* be present, so if the message length is already |
|
congruent to 448 mod 512, then 512 padding bits must be added. */ |
|
|
|
var finalBlock = forge.util.createBuffer(); |
|
finalBlock.putBytes(_input.bytes()); |
|
|
|
// compute remaining size to be digested (include message length size) |
|
var remaining = ( |
|
md.fullMessageLength[md.fullMessageLength.length - 1] + |
|
md.messageLengthSize); |
|
|
|
// add padding for overflow blockSize - overflow |
|
// _padding starts with 1 byte with first bit is set (byte value 128), then |
|
// there may be up to (blockSize - 1) other pad bytes |
|
var overflow = remaining & (md.blockLength - 1); |
|
finalBlock.putBytes(_padding.substr(0, md.blockLength - overflow)); |
|
|
|
// serialize message length in bits in little-endian order; since length |
|
// is stored in bytes we multiply by 8 and add carry |
|
var bits, carry = 0; |
|
for(var i = md.fullMessageLength.length - 1; i >= 0; --i) { |
|
bits = md.fullMessageLength[i] * 8 + carry; |
|
carry = (bits / 0x100000000) >>> 0; |
|
finalBlock.putInt32Le(bits >>> 0); |
|
} |
|
|
|
var s2 = { |
|
h0: _state.h0, |
|
h1: _state.h1, |
|
h2: _state.h2, |
|
h3: _state.h3 |
|
}; |
|
_update(s2, _w, finalBlock); |
|
var rval = forge.util.createBuffer(); |
|
rval.putInt32Le(s2.h0); |
|
rval.putInt32Le(s2.h1); |
|
rval.putInt32Le(s2.h2); |
|
rval.putInt32Le(s2.h3); |
|
return rval; |
|
}; |
|
|
|
return md; |
|
}; |
|
|
|
// padding, constant tables for calculating md5 |
|
var _padding = null; |
|
var _g = null; |
|
var _r = null; |
|
var _k = null; |
|
var _initialized = false; |
|
|
|
/** |
|
* Initializes the constant tables. |
|
*/ |
|
function _init() { |
|
// create padding |
|
_padding = String.fromCharCode(128); |
|
_padding += forge.util.fillString(String.fromCharCode(0x00), 64); |
|
|
|
// g values |
|
_g = [ |
|
0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, |
|
1, 6, 11, 0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12, |
|
5, 8, 11, 14, 1, 4, 7, 10, 13, 0, 3, 6, 9, 12, 15, 2, |
|
0, 7, 14, 5, 12, 3, 10, 1, 8, 15, 6, 13, 4, 11, 2, 9]; |
|
|
|
// rounds table |
|
_r = [ |
|
7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, |
|
5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, |
|
4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, |
|
6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21]; |
|
|
|
// get the result of abs(sin(i + 1)) as a 32-bit integer |
|
_k = new Array(64); |
|
for(var i = 0; i < 64; ++i) { |
|
_k[i] = Math.floor(Math.abs(Math.sin(i + 1)) * 0x100000000); |
|
} |
|
|
|
// now initialized |
|
_initialized = true; |
|
} |
|
|
|
/** |
|
* Updates an MD5 state with the given byte buffer. |
|
* |
|
* @param s the MD5 state to update. |
|
* @param w the array to use to store words. |
|
* @param bytes the byte buffer to update with. |
|
*/ |
|
function _update(s, w, bytes) { |
|
// consume 512 bit (64 byte) chunks |
|
var t, a, b, c, d, f, r, i; |
|
var len = bytes.length(); |
|
while(len >= 64) { |
|
// initialize hash value for this chunk |
|
a = s.h0; |
|
b = s.h1; |
|
c = s.h2; |
|
d = s.h3; |
|
|
|
// round 1 |
|
for(i = 0; i < 16; ++i) { |
|
w[i] = bytes.getInt32Le(); |
|
f = d ^ (b & (c ^ d)); |
|
t = (a + f + _k[i] + w[i]); |
|
r = _r[i]; |
|
a = d; |
|
d = c; |
|
c = b; |
|
b += (t << r) | (t >>> (32 - r)); |
|
} |
|
// round 2 |
|
for(; i < 32; ++i) { |
|
f = c ^ (d & (b ^ c)); |
|
t = (a + f + _k[i] + w[_g[i]]); |
|
r = _r[i]; |
|
a = d; |
|
d = c; |
|
c = b; |
|
b += (t << r) | (t >>> (32 - r)); |
|
} |
|
// round 3 |
|
for(; i < 48; ++i) { |
|
f = b ^ c ^ d; |
|
t = (a + f + _k[i] + w[_g[i]]); |
|
r = _r[i]; |
|
a = d; |
|
d = c; |
|
c = b; |
|
b += (t << r) | (t >>> (32 - r)); |
|
} |
|
// round 4 |
|
for(; i < 64; ++i) { |
|
f = c ^ (b | ~d); |
|
t = (a + f + _k[i] + w[_g[i]]); |
|
r = _r[i]; |
|
a = d; |
|
d = c; |
|
c = b; |
|
b += (t << r) | (t >>> (32 - r)); |
|
} |
|
|
|
// update hash state |
|
s.h0 = (s.h0 + a) | 0; |
|
s.h1 = (s.h1 + b) | 0; |
|
s.h2 = (s.h2 + c) | 0; |
|
s.h3 = (s.h3 + d) | 0; |
|
|
|
len -= 64; |
|
} |
|
}
|
|
|