| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162 |
- "use strict";
- Object.defineProperty(exports, "__esModule", { value: true });
- exports.SHA512_IV = exports.SHA384_IV = exports.SHA224_IV = exports.SHA256_IV = exports.HashMD = void 0;
- exports.setBigUint64 = setBigUint64;
- exports.Chi = Chi;
- exports.Maj = Maj;
- /**
- * Internal Merkle-Damgard hash utils.
- * @module
- */
- const utils_ts_1 = require("./utils.js");
- /** Polyfill for Safari 14. https://caniuse.com/mdn-javascript_builtins_dataview_setbiguint64 */
- function setBigUint64(view, byteOffset, value, isLE) {
- if (typeof view.setBigUint64 === 'function')
- return view.setBigUint64(byteOffset, value, isLE);
- const _32n = BigInt(32);
- const _u32_max = BigInt(0xffffffff);
- const wh = Number((value >> _32n) & _u32_max);
- const wl = Number(value & _u32_max);
- const h = isLE ? 4 : 0;
- const l = isLE ? 0 : 4;
- view.setUint32(byteOffset + h, wh, isLE);
- view.setUint32(byteOffset + l, wl, isLE);
- }
- /** Choice: a ? b : c */
- function Chi(a, b, c) {
- return (a & b) ^ (~a & c);
- }
- /** Majority function, true if any two inputs is true. */
- function Maj(a, b, c) {
- return (a & b) ^ (a & c) ^ (b & c);
- }
- /**
- * Merkle-Damgard hash construction base class.
- * Could be used to create MD5, RIPEMD, SHA1, SHA2.
- */
- class HashMD extends utils_ts_1.Hash {
- constructor(blockLen, outputLen, padOffset, isLE) {
- super();
- this.finished = false;
- this.length = 0;
- this.pos = 0;
- this.destroyed = false;
- this.blockLen = blockLen;
- this.outputLen = outputLen;
- this.padOffset = padOffset;
- this.isLE = isLE;
- this.buffer = new Uint8Array(blockLen);
- this.view = (0, utils_ts_1.createView)(this.buffer);
- }
- update(data) {
- (0, utils_ts_1.aexists)(this);
- data = (0, utils_ts_1.toBytes)(data);
- (0, utils_ts_1.abytes)(data);
- const { view, buffer, blockLen } = this;
- const len = data.length;
- for (let pos = 0; pos < len;) {
- const take = Math.min(blockLen - this.pos, len - pos);
- // Fast path: we have at least one block in input, cast it to view and process
- if (take === blockLen) {
- const dataView = (0, utils_ts_1.createView)(data);
- for (; blockLen <= len - pos; pos += blockLen)
- this.process(dataView, pos);
- continue;
- }
- buffer.set(data.subarray(pos, pos + take), this.pos);
- this.pos += take;
- pos += take;
- if (this.pos === blockLen) {
- this.process(view, 0);
- this.pos = 0;
- }
- }
- this.length += data.length;
- this.roundClean();
- return this;
- }
- digestInto(out) {
- (0, utils_ts_1.aexists)(this);
- (0, utils_ts_1.aoutput)(out, this);
- this.finished = true;
- // Padding
- // We can avoid allocation of buffer for padding completely if it
- // was previously not allocated here. But it won't change performance.
- const { buffer, view, blockLen, isLE } = this;
- let { pos } = this;
- // append the bit '1' to the message
- buffer[pos++] = 0b10000000;
- (0, utils_ts_1.clean)(this.buffer.subarray(pos));
- // we have less than padOffset left in buffer, so we cannot put length in
- // current block, need process it and pad again
- if (this.padOffset > blockLen - pos) {
- this.process(view, 0);
- pos = 0;
- }
- // Pad until full block byte with zeros
- for (let i = pos; i < blockLen; i++)
- buffer[i] = 0;
- // Note: sha512 requires length to be 128bit integer, but length in JS will overflow before that
- // You need to write around 2 exabytes (u64_max / 8 / (1024**6)) for this to happen.
- // So we just write lowest 64 bits of that value.
- setBigUint64(view, blockLen - 8, BigInt(this.length * 8), isLE);
- this.process(view, 0);
- const oview = (0, utils_ts_1.createView)(out);
- const len = this.outputLen;
- // NOTE: we do division by 4 later, which should be fused in single op with modulo by JIT
- if (len % 4)
- throw new Error('_sha2: outputLen should be aligned to 32bit');
- const outLen = len / 4;
- const state = this.get();
- if (outLen > state.length)
- throw new Error('_sha2: outputLen bigger than state');
- for (let i = 0; i < outLen; i++)
- oview.setUint32(4 * i, state[i], isLE);
- }
- digest() {
- const { buffer, outputLen } = this;
- this.digestInto(buffer);
- const res = buffer.slice(0, outputLen);
- this.destroy();
- return res;
- }
- _cloneInto(to) {
- to || (to = new this.constructor());
- to.set(...this.get());
- const { blockLen, buffer, length, finished, destroyed, pos } = this;
- to.destroyed = destroyed;
- to.finished = finished;
- to.length = length;
- to.pos = pos;
- if (length % blockLen)
- to.buffer.set(buffer);
- return to;
- }
- clone() {
- return this._cloneInto();
- }
- }
- exports.HashMD = HashMD;
- /**
- * Initial SHA-2 state: fractional parts of square roots of first 16 primes 2..53.
- * Check out `test/misc/sha2-gen-iv.js` for recomputation guide.
- */
- /** Initial SHA256 state. Bits 0..32 of frac part of sqrt of primes 2..19 */
- exports.SHA256_IV = Uint32Array.from([
- 0x6a09e667, 0xbb67ae85, 0x3c6ef372, 0xa54ff53a, 0x510e527f, 0x9b05688c, 0x1f83d9ab, 0x5be0cd19,
- ]);
- /** Initial SHA224 state. Bits 32..64 of frac part of sqrt of primes 23..53 */
- exports.SHA224_IV = Uint32Array.from([
- 0xc1059ed8, 0x367cd507, 0x3070dd17, 0xf70e5939, 0xffc00b31, 0x68581511, 0x64f98fa7, 0xbefa4fa4,
- ]);
- /** Initial SHA384 state. Bits 0..64 of frac part of sqrt of primes 23..53 */
- exports.SHA384_IV = Uint32Array.from([
- 0xcbbb9d5d, 0xc1059ed8, 0x629a292a, 0x367cd507, 0x9159015a, 0x3070dd17, 0x152fecd8, 0xf70e5939,
- 0x67332667, 0xffc00b31, 0x8eb44a87, 0x68581511, 0xdb0c2e0d, 0x64f98fa7, 0x47b5481d, 0xbefa4fa4,
- ]);
- /** Initial SHA512 state. Bits 0..64 of frac part of sqrt of primes 2..19 */
- exports.SHA512_IV = Uint32Array.from([
- 0x6a09e667, 0xf3bcc908, 0xbb67ae85, 0x84caa73b, 0x3c6ef372, 0xfe94f82b, 0xa54ff53a, 0x5f1d36f1,
- 0x510e527f, 0xade682d1, 0x9b05688c, 0x2b3e6c1f, 0x1f83d9ab, 0xfb41bd6b, 0x5be0cd19, 0x137e2179,
- ]);
- //# sourceMappingURL=_md.js.map
|