123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289 |
- /**
- * Message Digest Algorithm 5 with 128-bit digest (MD5) implementation.
- *
- * @author Dave Longley
- *
- * Copyright (c) 2010-2014 Digital Bazaar, Inc.
- */
- var forge = require('./forge');
- require('./md');
- require('./util');
- var md5 = module.exports = forge.md5 = forge.md5 || {};
- forge.md.md5 = forge.md.algorithms.md5 = md5;
- /**
- * Creates an MD5 message digest object.
- *
- * @return a message digest object.
- */
- md5.create = function() {
- // do initialization as necessary
- if(!_initialized) {
- _init();
- }
- // MD5 state contains four 32-bit integers
- var _state = null;
- // input buffer
- var _input = forge.util.createBuffer();
- // used for word storage
- var _w = new Array(16);
- // message digest object
- var md = {
- algorithm: 'md5',
- blockLength: 64,
- digestLength: 16,
- // 56-bit length of message so far (does not including padding)
- messageLength: 0,
- // true message length
- fullMessageLength: null,
- // size of message length in bytes
- messageLengthSize: 8
- };
- /**
- * Starts the digest.
- *
- * @return this digest object.
- */
- md.start = function() {
- // up to 56-bit message length for convenience
- md.messageLength = 0;
- // full message length (set md.messageLength64 for backwards-compatibility)
- md.fullMessageLength = md.messageLength64 = [];
- var int32s = md.messageLengthSize / 4;
- for(var i = 0; i < int32s; ++i) {
- md.fullMessageLength.push(0);
- }
- _input = forge.util.createBuffer();
- _state = {
- h0: 0x67452301,
- h1: 0xEFCDAB89,
- h2: 0x98BADCFE,
- h3: 0x10325476
- };
- return md;
- };
- // start digest automatically for first time
- md.start();
- /**
- * Updates the digest with the given message input. The given input can
- * treated as raw input (no encoding will be applied) or an encoding of
- * 'utf8' maybe given to encode the input using UTF-8.
- *
- * @param msg the message input to update with.
- * @param encoding the encoding to use (default: 'raw', other: 'utf8').
- *
- * @return this digest object.
- */
- md.update = function(msg, encoding) {
- if(encoding === 'utf8') {
- msg = forge.util.encodeUtf8(msg);
- }
- // update message length
- var len = msg.length;
- md.messageLength += len;
- len = [(len / 0x100000000) >>> 0, len >>> 0];
- for(var i = md.fullMessageLength.length - 1; i >= 0; --i) {
- md.fullMessageLength[i] += len[1];
- len[1] = len[0] + ((md.fullMessageLength[i] / 0x100000000) >>> 0);
- md.fullMessageLength[i] = md.fullMessageLength[i] >>> 0;
- len[0] = (len[1] / 0x100000000) >>> 0;
- }
- // add bytes to input buffer
- _input.putBytes(msg);
- // process bytes
- _update(_state, _w, _input);
- // compact input buffer every 2K or if empty
- if(_input.read > 2048 || _input.length() === 0) {
- _input.compact();
- }
- return md;
- };
- /**
- * Produces the digest.
- *
- * @return a byte buffer containing the digest value.
- */
- md.digest = function() {
- /* Note: Here we copy the remaining bytes in the input buffer and
- add the appropriate MD5 padding. Then we do the final update
- on a copy of the state so that if the user wants to get
- intermediate digests they can do so. */
- /* Determine the number of bytes that must be added to the message
- to ensure its length is congruent to 448 mod 512. In other words,
- the data to be digested must be a multiple of 512 bits (or 128 bytes).
- This data includes the message, some padding, and the length of the
- message. Since the length of the message will be encoded as 8 bytes (64
- bits), that means that the last segment of the data must have 56 bytes
- (448 bits) of message and padding. Therefore, the length of the message
- plus the padding must be congruent to 448 mod 512 because
- 512 - 128 = 448.
- In order to fill up the message length it must be filled with
- padding that begins with 1 bit followed by all 0 bits. Padding
- must *always* be present, so if the message length is already
- congruent to 448 mod 512, then 512 padding bits must be added. */
- var finalBlock = forge.util.createBuffer();
- finalBlock.putBytes(_input.bytes());
- // compute remaining size to be digested (include message length size)
- var remaining = (
- md.fullMessageLength[md.fullMessageLength.length - 1] +
- md.messageLengthSize);
- // add padding for overflow blockSize - overflow
- // _padding starts with 1 byte with first bit is set (byte value 128), then
- // there may be up to (blockSize - 1) other pad bytes
- var overflow = remaining & (md.blockLength - 1);
- finalBlock.putBytes(_padding.substr(0, md.blockLength - overflow));
- // serialize message length in bits in little-endian order; since length
- // is stored in bytes we multiply by 8 and add carry
- var bits, carry = 0;
- for(var i = md.fullMessageLength.length - 1; i >= 0; --i) {
- bits = md.fullMessageLength[i] * 8 + carry;
- carry = (bits / 0x100000000) >>> 0;
- finalBlock.putInt32Le(bits >>> 0);
- }
- var s2 = {
- h0: _state.h0,
- h1: _state.h1,
- h2: _state.h2,
- h3: _state.h3
- };
- _update(s2, _w, finalBlock);
- var rval = forge.util.createBuffer();
- rval.putInt32Le(s2.h0);
- rval.putInt32Le(s2.h1);
- rval.putInt32Le(s2.h2);
- rval.putInt32Le(s2.h3);
- return rval;
- };
- return md;
- };
- // padding, constant tables for calculating md5
- var _padding = null;
- var _g = null;
- var _r = null;
- var _k = null;
- var _initialized = false;
- /**
- * Initializes the constant tables.
- */
- function _init() {
- // create padding
- _padding = String.fromCharCode(128);
- _padding += forge.util.fillString(String.fromCharCode(0x00), 64);
- // g values
- _g = [
- 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
- 1, 6, 11, 0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12,
- 5, 8, 11, 14, 1, 4, 7, 10, 13, 0, 3, 6, 9, 12, 15, 2,
- 0, 7, 14, 5, 12, 3, 10, 1, 8, 15, 6, 13, 4, 11, 2, 9];
- // rounds table
- _r = [
- 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22,
- 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20,
- 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23,
- 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21];
- // get the result of abs(sin(i + 1)) as a 32-bit integer
- _k = new Array(64);
- for(var i = 0; i < 64; ++i) {
- _k[i] = Math.floor(Math.abs(Math.sin(i + 1)) * 0x100000000);
- }
- // now initialized
- _initialized = true;
- }
- /**
- * Updates an MD5 state with the given byte buffer.
- *
- * @param s the MD5 state to update.
- * @param w the array to use to store words.
- * @param bytes the byte buffer to update with.
- */
- function _update(s, w, bytes) {
- // consume 512 bit (64 byte) chunks
- var t, a, b, c, d, f, r, i;
- var len = bytes.length();
- while(len >= 64) {
- // initialize hash value for this chunk
- a = s.h0;
- b = s.h1;
- c = s.h2;
- d = s.h3;
- // round 1
- for(i = 0; i < 16; ++i) {
- w[i] = bytes.getInt32Le();
- f = d ^ (b & (c ^ d));
- t = (a + f + _k[i] + w[i]);
- r = _r[i];
- a = d;
- d = c;
- c = b;
- b += (t << r) | (t >>> (32 - r));
- }
- // round 2
- for(; i < 32; ++i) {
- f = c ^ (d & (b ^ c));
- t = (a + f + _k[i] + w[_g[i]]);
- r = _r[i];
- a = d;
- d = c;
- c = b;
- b += (t << r) | (t >>> (32 - r));
- }
- // round 3
- for(; i < 48; ++i) {
- f = b ^ c ^ d;
- t = (a + f + _k[i] + w[_g[i]]);
- r = _r[i];
- a = d;
- d = c;
- c = b;
- b += (t << r) | (t >>> (32 - r));
- }
- // round 4
- for(; i < 64; ++i) {
- f = c ^ (b | ~d);
- t = (a + f + _k[i] + w[_g[i]]);
- r = _r[i];
- a = d;
- d = c;
- c = b;
- b += (t << r) | (t >>> (32 - r));
- }
- // update hash state
- s.h0 = (s.h0 + a) | 0;
- s.h1 = (s.h1 + b) | 0;
- s.h2 = (s.h2 + c) | 0;
- s.h3 = (s.h3 + d) | 0;
- len -= 64;
- }
- }
|