You can not select more than 25 topics
			Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
		
		
		
		
		
			
		
			
				
					290 lines
				
				7.8 KiB
			
		
		
			
		
	
	
					290 lines
				
				7.8 KiB
			| 
											2 years ago
										 | /** | ||
|  |  * Message Digest Algorithm 5 with 128-bit digest (MD5) implementation. | ||
|  |  * | ||
|  |  * @author Dave Longley | ||
|  |  * | ||
|  |  * Copyright (c) 2010-2014 Digital Bazaar, Inc. | ||
|  |  */ | ||
|  | var forge = require('./forge'); | ||
|  | require('./md'); | ||
|  | require('./util'); | ||
|  | 
 | ||
|  | var md5 = module.exports = forge.md5 = forge.md5 || {}; | ||
|  | forge.md.md5 = forge.md.algorithms.md5 = md5; | ||
|  | 
 | ||
|  | /** | ||
|  |  * Creates an MD5 message digest object. | ||
|  |  * | ||
|  |  * @return a message digest object. | ||
|  |  */ | ||
|  | md5.create = function() { | ||
|  |   // do initialization as necessary
 | ||
|  |   if(!_initialized) { | ||
|  |     _init(); | ||
|  |   } | ||
|  | 
 | ||
|  |   // MD5 state contains four 32-bit integers
 | ||
|  |   var _state = null; | ||
|  | 
 | ||
|  |   // input buffer
 | ||
|  |   var _input = forge.util.createBuffer(); | ||
|  | 
 | ||
|  |   // used for word storage
 | ||
|  |   var _w = new Array(16); | ||
|  | 
 | ||
|  |   // message digest object
 | ||
|  |   var md = { | ||
|  |     algorithm: 'md5', | ||
|  |     blockLength: 64, | ||
|  |     digestLength: 16, | ||
|  |     // 56-bit length of message so far (does not including padding)
 | ||
|  |     messageLength: 0, | ||
|  |     // true message length
 | ||
|  |     fullMessageLength: null, | ||
|  |     // size of message length in bytes
 | ||
|  |     messageLengthSize: 8 | ||
|  |   }; | ||
|  | 
 | ||
|  |   /** | ||
|  |    * Starts the digest. | ||
|  |    * | ||
|  |    * @return this digest object. | ||
|  |    */ | ||
|  |   md.start = function() { | ||
|  |     // up to 56-bit message length for convenience
 | ||
|  |     md.messageLength = 0; | ||
|  | 
 | ||
|  |     // full message length (set md.messageLength64 for backwards-compatibility)
 | ||
|  |     md.fullMessageLength = md.messageLength64 = []; | ||
|  |     var int32s = md.messageLengthSize / 4; | ||
|  |     for(var i = 0; i < int32s; ++i) { | ||
|  |       md.fullMessageLength.push(0); | ||
|  |     } | ||
|  |     _input = forge.util.createBuffer(); | ||
|  |     _state = { | ||
|  |       h0: 0x67452301, | ||
|  |       h1: 0xEFCDAB89, | ||
|  |       h2: 0x98BADCFE, | ||
|  |       h3: 0x10325476 | ||
|  |     }; | ||
|  |     return md; | ||
|  |   }; | ||
|  |   // start digest automatically for first time
 | ||
|  |   md.start(); | ||
|  | 
 | ||
|  |   /** | ||
|  |    * Updates the digest with the given message input. The given input can | ||
|  |    * treated as raw input (no encoding will be applied) or an encoding of | ||
|  |    * 'utf8' maybe given to encode the input using UTF-8. | ||
|  |    * | ||
|  |    * @param msg the message input to update with. | ||
|  |    * @param encoding the encoding to use (default: 'raw', other: 'utf8'). | ||
|  |    * | ||
|  |    * @return this digest object. | ||
|  |    */ | ||
|  |   md.update = function(msg, encoding) { | ||
|  |     if(encoding === 'utf8') { | ||
|  |       msg = forge.util.encodeUtf8(msg); | ||
|  |     } | ||
|  | 
 | ||
|  |     // update message length
 | ||
|  |     var len = msg.length; | ||
|  |     md.messageLength += len; | ||
|  |     len = [(len / 0x100000000) >>> 0, len >>> 0]; | ||
|  |     for(var i = md.fullMessageLength.length - 1; i >= 0; --i) { | ||
|  |       md.fullMessageLength[i] += len[1]; | ||
|  |       len[1] = len[0] + ((md.fullMessageLength[i] / 0x100000000) >>> 0); | ||
|  |       md.fullMessageLength[i] = md.fullMessageLength[i] >>> 0; | ||
|  |       len[0] = (len[1] / 0x100000000) >>> 0; | ||
|  |     } | ||
|  | 
 | ||
|  |     // add bytes to input buffer
 | ||
|  |     _input.putBytes(msg); | ||
|  | 
 | ||
|  |     // process bytes
 | ||
|  |     _update(_state, _w, _input); | ||
|  | 
 | ||
|  |     // compact input buffer every 2K or if empty
 | ||
|  |     if(_input.read > 2048 || _input.length() === 0) { | ||
|  |       _input.compact(); | ||
|  |     } | ||
|  | 
 | ||
|  |     return md; | ||
|  |   }; | ||
|  | 
 | ||
|  |   /** | ||
|  |    * Produces the digest. | ||
|  |    * | ||
|  |    * @return a byte buffer containing the digest value. | ||
|  |    */ | ||
|  |   md.digest = function() { | ||
|  |     /* Note: Here we copy the remaining bytes in the input buffer and | ||
|  |     add the appropriate MD5 padding. Then we do the final update | ||
|  |     on a copy of the state so that if the user wants to get | ||
|  |     intermediate digests they can do so. */ | ||
|  | 
 | ||
|  |     /* Determine the number of bytes that must be added to the message | ||
|  |     to ensure its length is congruent to 448 mod 512. In other words, | ||
|  |     the data to be digested must be a multiple of 512 bits (or 128 bytes). | ||
|  |     This data includes the message, some padding, and the length of the | ||
|  |     message. Since the length of the message will be encoded as 8 bytes (64 | ||
|  |     bits), that means that the last segment of the data must have 56 bytes | ||
|  |     (448 bits) of message and padding. Therefore, the length of the message | ||
|  |     plus the padding must be congruent to 448 mod 512 because | ||
|  |     512 - 128 = 448. | ||
|  | 
 | ||
|  |     In order to fill up the message length it must be filled with | ||
|  |     padding that begins with 1 bit followed by all 0 bits. Padding | ||
|  |     must *always* be present, so if the message length is already | ||
|  |     congruent to 448 mod 512, then 512 padding bits must be added. */ | ||
|  | 
 | ||
|  |     var finalBlock = forge.util.createBuffer(); | ||
|  |     finalBlock.putBytes(_input.bytes()); | ||
|  | 
 | ||
|  |     // compute remaining size to be digested (include message length size)
 | ||
|  |     var remaining = ( | ||
|  |       md.fullMessageLength[md.fullMessageLength.length - 1] + | ||
|  |       md.messageLengthSize); | ||
|  | 
 | ||
|  |     // add padding for overflow blockSize - overflow
 | ||
|  |     // _padding starts with 1 byte with first bit is set (byte value 128), then
 | ||
|  |     // there may be up to (blockSize - 1) other pad bytes
 | ||
|  |     var overflow = remaining & (md.blockLength - 1); | ||
|  |     finalBlock.putBytes(_padding.substr(0, md.blockLength - overflow)); | ||
|  | 
 | ||
|  |     // serialize message length in bits in little-endian order; since length
 | ||
|  |     // is stored in bytes we multiply by 8 and add carry
 | ||
|  |     var bits, carry = 0; | ||
|  |     for(var i = md.fullMessageLength.length - 1; i >= 0; --i) { | ||
|  |       bits = md.fullMessageLength[i] * 8 + carry; | ||
|  |       carry = (bits / 0x100000000) >>> 0; | ||
|  |       finalBlock.putInt32Le(bits >>> 0); | ||
|  |     } | ||
|  | 
 | ||
|  |     var s2 = { | ||
|  |       h0: _state.h0, | ||
|  |       h1: _state.h1, | ||
|  |       h2: _state.h2, | ||
|  |       h3: _state.h3 | ||
|  |     }; | ||
|  |     _update(s2, _w, finalBlock); | ||
|  |     var rval = forge.util.createBuffer(); | ||
|  |     rval.putInt32Le(s2.h0); | ||
|  |     rval.putInt32Le(s2.h1); | ||
|  |     rval.putInt32Le(s2.h2); | ||
|  |     rval.putInt32Le(s2.h3); | ||
|  |     return rval; | ||
|  |   }; | ||
|  | 
 | ||
|  |   return md; | ||
|  | }; | ||
|  | 
 | ||
|  | // padding, constant tables for calculating md5
 | ||
|  | var _padding = null; | ||
|  | var _g = null; | ||
|  | var _r = null; | ||
|  | var _k = null; | ||
|  | var _initialized = false; | ||
|  | 
 | ||
|  | /** | ||
|  |  * Initializes the constant tables. | ||
|  |  */ | ||
|  | function _init() { | ||
|  |   // create padding
 | ||
|  |   _padding = String.fromCharCode(128); | ||
|  |   _padding += forge.util.fillString(String.fromCharCode(0x00), 64); | ||
|  | 
 | ||
|  |   // g values
 | ||
|  |   _g = [ | ||
|  |     0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15, | ||
|  |     1, 6, 11, 0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12, | ||
|  |     5, 8, 11, 14, 1, 4, 7, 10, 13, 0, 3, 6, 9, 12, 15, 2, | ||
|  |     0, 7, 14, 5, 12, 3, 10, 1, 8, 15, 6, 13, 4, 11, 2, 9]; | ||
|  | 
 | ||
|  |   // rounds table
 | ||
|  |   _r = [ | ||
|  |     7, 12, 17, 22,  7, 12, 17, 22,  7, 12, 17, 22,  7, 12, 17, 22, | ||
|  |     5,  9, 14, 20,  5,  9, 14, 20,  5,  9, 14, 20,  5,  9, 14, 20, | ||
|  |     4, 11, 16, 23,  4, 11, 16, 23,  4, 11, 16, 23,  4, 11, 16, 23, | ||
|  |     6, 10, 15, 21,  6, 10, 15, 21,  6, 10, 15, 21,  6, 10, 15, 21]; | ||
|  | 
 | ||
|  |   // get the result of abs(sin(i + 1)) as a 32-bit integer
 | ||
|  |   _k = new Array(64); | ||
|  |   for(var i = 0; i < 64; ++i) { | ||
|  |     _k[i] = Math.floor(Math.abs(Math.sin(i + 1)) * 0x100000000); | ||
|  |   } | ||
|  | 
 | ||
|  |   // now initialized
 | ||
|  |   _initialized = true; | ||
|  | } | ||
|  | 
 | ||
|  | /** | ||
|  |  * Updates an MD5 state with the given byte buffer. | ||
|  |  * | ||
|  |  * @param s the MD5 state to update. | ||
|  |  * @param w the array to use to store words. | ||
|  |  * @param bytes the byte buffer to update with. | ||
|  |  */ | ||
|  | function _update(s, w, bytes) { | ||
|  |   // consume 512 bit (64 byte) chunks
 | ||
|  |   var t, a, b, c, d, f, r, i; | ||
|  |   var len = bytes.length(); | ||
|  |   while(len >= 64) { | ||
|  |     // initialize hash value for this chunk
 | ||
|  |     a = s.h0; | ||
|  |     b = s.h1; | ||
|  |     c = s.h2; | ||
|  |     d = s.h3; | ||
|  | 
 | ||
|  |     // round 1
 | ||
|  |     for(i = 0; i < 16; ++i) { | ||
|  |       w[i] = bytes.getInt32Le(); | ||
|  |       f = d ^ (b & (c ^ d)); | ||
|  |       t = (a + f + _k[i] + w[i]); | ||
|  |       r = _r[i]; | ||
|  |       a = d; | ||
|  |       d = c; | ||
|  |       c = b; | ||
|  |       b += (t << r) | (t >>> (32 - r)); | ||
|  |     } | ||
|  |     // round 2
 | ||
|  |     for(; i < 32; ++i) { | ||
|  |       f = c ^ (d & (b ^ c)); | ||
|  |       t = (a + f + _k[i] + w[_g[i]]); | ||
|  |       r = _r[i]; | ||
|  |       a = d; | ||
|  |       d = c; | ||
|  |       c = b; | ||
|  |       b += (t << r) | (t >>> (32 - r)); | ||
|  |     } | ||
|  |     // round 3
 | ||
|  |     for(; i < 48; ++i) { | ||
|  |       f = b ^ c ^ d; | ||
|  |       t = (a + f + _k[i] + w[_g[i]]); | ||
|  |       r = _r[i]; | ||
|  |       a = d; | ||
|  |       d = c; | ||
|  |       c = b; | ||
|  |       b += (t << r) | (t >>> (32 - r)); | ||
|  |     } | ||
|  |     // round 4
 | ||
|  |     for(; i < 64; ++i) { | ||
|  |       f = c ^ (b | ~d); | ||
|  |       t = (a + f + _k[i] + w[_g[i]]); | ||
|  |       r = _r[i]; | ||
|  |       a = d; | ||
|  |       d = c; | ||
|  |       c = b; | ||
|  |       b += (t << r) | (t >>> (32 - r)); | ||
|  |     } | ||
|  | 
 | ||
|  |     // update hash state
 | ||
|  |     s.h0 = (s.h0 + a) | 0; | ||
|  |     s.h1 = (s.h1 + b) | 0; | ||
|  |     s.h2 = (s.h2 + c) | 0; | ||
|  |     s.h3 = (s.h3 + d) | 0; | ||
|  | 
 | ||
|  |     len -= 64; | ||
|  |   } | ||
|  | } |