You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
290 lines
7.8 KiB
290 lines
7.8 KiB
/**
|
|
* Message Digest Algorithm 5 with 128-bit digest (MD5) implementation.
|
|
*
|
|
* @author Dave Longley
|
|
*
|
|
* Copyright (c) 2010-2014 Digital Bazaar, Inc.
|
|
*/
|
|
var forge = require('./forge');
|
|
require('./md');
|
|
require('./util');
|
|
|
|
var md5 = module.exports = forge.md5 = forge.md5 || {};
|
|
forge.md.md5 = forge.md.algorithms.md5 = md5;
|
|
|
|
/**
|
|
* Creates an MD5 message digest object.
|
|
*
|
|
* @return a message digest object.
|
|
*/
|
|
md5.create = function() {
|
|
// do initialization as necessary
|
|
if(!_initialized) {
|
|
_init();
|
|
}
|
|
|
|
// MD5 state contains four 32-bit integers
|
|
var _state = null;
|
|
|
|
// input buffer
|
|
var _input = forge.util.createBuffer();
|
|
|
|
// used for word storage
|
|
var _w = new Array(16);
|
|
|
|
// message digest object
|
|
var md = {
|
|
algorithm: 'md5',
|
|
blockLength: 64,
|
|
digestLength: 16,
|
|
// 56-bit length of message so far (does not including padding)
|
|
messageLength: 0,
|
|
// true message length
|
|
fullMessageLength: null,
|
|
// size of message length in bytes
|
|
messageLengthSize: 8
|
|
};
|
|
|
|
/**
|
|
* Starts the digest.
|
|
*
|
|
* @return this digest object.
|
|
*/
|
|
md.start = function() {
|
|
// up to 56-bit message length for convenience
|
|
md.messageLength = 0;
|
|
|
|
// full message length (set md.messageLength64 for backwards-compatibility)
|
|
md.fullMessageLength = md.messageLength64 = [];
|
|
var int32s = md.messageLengthSize / 4;
|
|
for(var i = 0; i < int32s; ++i) {
|
|
md.fullMessageLength.push(0);
|
|
}
|
|
_input = forge.util.createBuffer();
|
|
_state = {
|
|
h0: 0x67452301,
|
|
h1: 0xEFCDAB89,
|
|
h2: 0x98BADCFE,
|
|
h3: 0x10325476
|
|
};
|
|
return md;
|
|
};
|
|
// start digest automatically for first time
|
|
md.start();
|
|
|
|
/**
|
|
* Updates the digest with the given message input. The given input can
|
|
* treated as raw input (no encoding will be applied) or an encoding of
|
|
* 'utf8' maybe given to encode the input using UTF-8.
|
|
*
|
|
* @param msg the message input to update with.
|
|
* @param encoding the encoding to use (default: 'raw', other: 'utf8').
|
|
*
|
|
* @return this digest object.
|
|
*/
|
|
md.update = function(msg, encoding) {
|
|
if(encoding === 'utf8') {
|
|
msg = forge.util.encodeUtf8(msg);
|
|
}
|
|
|
|
// update message length
|
|
var len = msg.length;
|
|
md.messageLength += len;
|
|
len = [(len / 0x100000000) >>> 0, len >>> 0];
|
|
for(var i = md.fullMessageLength.length - 1; i >= 0; --i) {
|
|
md.fullMessageLength[i] += len[1];
|
|
len[1] = len[0] + ((md.fullMessageLength[i] / 0x100000000) >>> 0);
|
|
md.fullMessageLength[i] = md.fullMessageLength[i] >>> 0;
|
|
len[0] = (len[1] / 0x100000000) >>> 0;
|
|
}
|
|
|
|
// add bytes to input buffer
|
|
_input.putBytes(msg);
|
|
|
|
// process bytes
|
|
_update(_state, _w, _input);
|
|
|
|
// compact input buffer every 2K or if empty
|
|
if(_input.read > 2048 || _input.length() === 0) {
|
|
_input.compact();
|
|
}
|
|
|
|
return md;
|
|
};
|
|
|
|
/**
|
|
* Produces the digest.
|
|
*
|
|
* @return a byte buffer containing the digest value.
|
|
*/
|
|
md.digest = function() {
|
|
/* Note: Here we copy the remaining bytes in the input buffer and
|
|
add the appropriate MD5 padding. Then we do the final update
|
|
on a copy of the state so that if the user wants to get
|
|
intermediate digests they can do so. */
|
|
|
|
/* Determine the number of bytes that must be added to the message
|
|
to ensure its length is congruent to 448 mod 512. In other words,
|
|
the data to be digested must be a multiple of 512 bits (or 128 bytes).
|
|
This data includes the message, some padding, and the length of the
|
|
message. Since the length of the message will be encoded as 8 bytes (64
|
|
bits), that means that the last segment of the data must have 56 bytes
|
|
(448 bits) of message and padding. Therefore, the length of the message
|
|
plus the padding must be congruent to 448 mod 512 because
|
|
512 - 128 = 448.
|
|
|
|
In order to fill up the message length it must be filled with
|
|
padding that begins with 1 bit followed by all 0 bits. Padding
|
|
must *always* be present, so if the message length is already
|
|
congruent to 448 mod 512, then 512 padding bits must be added. */
|
|
|
|
var finalBlock = forge.util.createBuffer();
|
|
finalBlock.putBytes(_input.bytes());
|
|
|
|
// compute remaining size to be digested (include message length size)
|
|
var remaining = (
|
|
md.fullMessageLength[md.fullMessageLength.length - 1] +
|
|
md.messageLengthSize);
|
|
|
|
// add padding for overflow blockSize - overflow
|
|
// _padding starts with 1 byte with first bit is set (byte value 128), then
|
|
// there may be up to (blockSize - 1) other pad bytes
|
|
var overflow = remaining & (md.blockLength - 1);
|
|
finalBlock.putBytes(_padding.substr(0, md.blockLength - overflow));
|
|
|
|
// serialize message length in bits in little-endian order; since length
|
|
// is stored in bytes we multiply by 8 and add carry
|
|
var bits, carry = 0;
|
|
for(var i = md.fullMessageLength.length - 1; i >= 0; --i) {
|
|
bits = md.fullMessageLength[i] * 8 + carry;
|
|
carry = (bits / 0x100000000) >>> 0;
|
|
finalBlock.putInt32Le(bits >>> 0);
|
|
}
|
|
|
|
var s2 = {
|
|
h0: _state.h0,
|
|
h1: _state.h1,
|
|
h2: _state.h2,
|
|
h3: _state.h3
|
|
};
|
|
_update(s2, _w, finalBlock);
|
|
var rval = forge.util.createBuffer();
|
|
rval.putInt32Le(s2.h0);
|
|
rval.putInt32Le(s2.h1);
|
|
rval.putInt32Le(s2.h2);
|
|
rval.putInt32Le(s2.h3);
|
|
return rval;
|
|
};
|
|
|
|
return md;
|
|
};
|
|
|
|
// padding, constant tables for calculating md5
|
|
var _padding = null;
|
|
var _g = null;
|
|
var _r = null;
|
|
var _k = null;
|
|
var _initialized = false;
|
|
|
|
/**
|
|
* Initializes the constant tables.
|
|
*/
|
|
function _init() {
|
|
// create padding
|
|
_padding = String.fromCharCode(128);
|
|
_padding += forge.util.fillString(String.fromCharCode(0x00), 64);
|
|
|
|
// g values
|
|
_g = [
|
|
0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
|
|
1, 6, 11, 0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12,
|
|
5, 8, 11, 14, 1, 4, 7, 10, 13, 0, 3, 6, 9, 12, 15, 2,
|
|
0, 7, 14, 5, 12, 3, 10, 1, 8, 15, 6, 13, 4, 11, 2, 9];
|
|
|
|
// rounds table
|
|
_r = [
|
|
7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22,
|
|
5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20,
|
|
4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23,
|
|
6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21];
|
|
|
|
// get the result of abs(sin(i + 1)) as a 32-bit integer
|
|
_k = new Array(64);
|
|
for(var i = 0; i < 64; ++i) {
|
|
_k[i] = Math.floor(Math.abs(Math.sin(i + 1)) * 0x100000000);
|
|
}
|
|
|
|
// now initialized
|
|
_initialized = true;
|
|
}
|
|
|
|
/**
|
|
* Updates an MD5 state with the given byte buffer.
|
|
*
|
|
* @param s the MD5 state to update.
|
|
* @param w the array to use to store words.
|
|
* @param bytes the byte buffer to update with.
|
|
*/
|
|
function _update(s, w, bytes) {
|
|
// consume 512 bit (64 byte) chunks
|
|
var t, a, b, c, d, f, r, i;
|
|
var len = bytes.length();
|
|
while(len >= 64) {
|
|
// initialize hash value for this chunk
|
|
a = s.h0;
|
|
b = s.h1;
|
|
c = s.h2;
|
|
d = s.h3;
|
|
|
|
// round 1
|
|
for(i = 0; i < 16; ++i) {
|
|
w[i] = bytes.getInt32Le();
|
|
f = d ^ (b & (c ^ d));
|
|
t = (a + f + _k[i] + w[i]);
|
|
r = _r[i];
|
|
a = d;
|
|
d = c;
|
|
c = b;
|
|
b += (t << r) | (t >>> (32 - r));
|
|
}
|
|
// round 2
|
|
for(; i < 32; ++i) {
|
|
f = c ^ (d & (b ^ c));
|
|
t = (a + f + _k[i] + w[_g[i]]);
|
|
r = _r[i];
|
|
a = d;
|
|
d = c;
|
|
c = b;
|
|
b += (t << r) | (t >>> (32 - r));
|
|
}
|
|
// round 3
|
|
for(; i < 48; ++i) {
|
|
f = b ^ c ^ d;
|
|
t = (a + f + _k[i] + w[_g[i]]);
|
|
r = _r[i];
|
|
a = d;
|
|
d = c;
|
|
c = b;
|
|
b += (t << r) | (t >>> (32 - r));
|
|
}
|
|
// round 4
|
|
for(; i < 64; ++i) {
|
|
f = c ^ (b | ~d);
|
|
t = (a + f + _k[i] + w[_g[i]]);
|
|
r = _r[i];
|
|
a = d;
|
|
d = c;
|
|
c = b;
|
|
b += (t << r) | (t >>> (32 - r));
|
|
}
|
|
|
|
// update hash state
|
|
s.h0 = (s.h0 + a) | 0;
|
|
s.h1 = (s.h1 + b) | 0;
|
|
s.h2 = (s.h2 + c) | 0;
|
|
s.h3 = (s.h3 + d) | 0;
|
|
|
|
len -= 64;
|
|
}
|
|
}
|