1 | /**
|
---|
2 | * Message Digest Algorithm 5 with 128-bit digest (MD5) implementation.
|
---|
3 | *
|
---|
4 | * @author Dave Longley
|
---|
5 | *
|
---|
6 | * Copyright (c) 2010-2014 Digital Bazaar, Inc.
|
---|
7 | */
|
---|
8 | var forge = require('./forge');
|
---|
9 | require('./md');
|
---|
10 | require('./util');
|
---|
11 |
|
---|
12 | var md5 = module.exports = forge.md5 = forge.md5 || {};
|
---|
13 | forge.md.md5 = forge.md.algorithms.md5 = md5;
|
---|
14 |
|
---|
15 | /**
|
---|
16 | * Creates an MD5 message digest object.
|
---|
17 | *
|
---|
18 | * @return a message digest object.
|
---|
19 | */
|
---|
20 | md5.create = function() {
|
---|
21 | // do initialization as necessary
|
---|
22 | if(!_initialized) {
|
---|
23 | _init();
|
---|
24 | }
|
---|
25 |
|
---|
26 | // MD5 state contains four 32-bit integers
|
---|
27 | var _state = null;
|
---|
28 |
|
---|
29 | // input buffer
|
---|
30 | var _input = forge.util.createBuffer();
|
---|
31 |
|
---|
32 | // used for word storage
|
---|
33 | var _w = new Array(16);
|
---|
34 |
|
---|
35 | // message digest object
|
---|
36 | var md = {
|
---|
37 | algorithm: 'md5',
|
---|
38 | blockLength: 64,
|
---|
39 | digestLength: 16,
|
---|
40 | // 56-bit length of message so far (does not including padding)
|
---|
41 | messageLength: 0,
|
---|
42 | // true message length
|
---|
43 | fullMessageLength: null,
|
---|
44 | // size of message length in bytes
|
---|
45 | messageLengthSize: 8
|
---|
46 | };
|
---|
47 |
|
---|
48 | /**
|
---|
49 | * Starts the digest.
|
---|
50 | *
|
---|
51 | * @return this digest object.
|
---|
52 | */
|
---|
53 | md.start = function() {
|
---|
54 | // up to 56-bit message length for convenience
|
---|
55 | md.messageLength = 0;
|
---|
56 |
|
---|
57 | // full message length (set md.messageLength64 for backwards-compatibility)
|
---|
58 | md.fullMessageLength = md.messageLength64 = [];
|
---|
59 | var int32s = md.messageLengthSize / 4;
|
---|
60 | for(var i = 0; i < int32s; ++i) {
|
---|
61 | md.fullMessageLength.push(0);
|
---|
62 | }
|
---|
63 | _input = forge.util.createBuffer();
|
---|
64 | _state = {
|
---|
65 | h0: 0x67452301,
|
---|
66 | h1: 0xEFCDAB89,
|
---|
67 | h2: 0x98BADCFE,
|
---|
68 | h3: 0x10325476
|
---|
69 | };
|
---|
70 | return md;
|
---|
71 | };
|
---|
72 | // start digest automatically for first time
|
---|
73 | md.start();
|
---|
74 |
|
---|
75 | /**
|
---|
76 | * Updates the digest with the given message input. The given input can
|
---|
77 | * treated as raw input (no encoding will be applied) or an encoding of
|
---|
78 | * 'utf8' maybe given to encode the input using UTF-8.
|
---|
79 | *
|
---|
80 | * @param msg the message input to update with.
|
---|
81 | * @param encoding the encoding to use (default: 'raw', other: 'utf8').
|
---|
82 | *
|
---|
83 | * @return this digest object.
|
---|
84 | */
|
---|
85 | md.update = function(msg, encoding) {
|
---|
86 | if(encoding === 'utf8') {
|
---|
87 | msg = forge.util.encodeUtf8(msg);
|
---|
88 | }
|
---|
89 |
|
---|
90 | // update message length
|
---|
91 | var len = msg.length;
|
---|
92 | md.messageLength += len;
|
---|
93 | len = [(len / 0x100000000) >>> 0, len >>> 0];
|
---|
94 | for(var i = md.fullMessageLength.length - 1; i >= 0; --i) {
|
---|
95 | md.fullMessageLength[i] += len[1];
|
---|
96 | len[1] = len[0] + ((md.fullMessageLength[i] / 0x100000000) >>> 0);
|
---|
97 | md.fullMessageLength[i] = md.fullMessageLength[i] >>> 0;
|
---|
98 | len[0] = (len[1] / 0x100000000) >>> 0;
|
---|
99 | }
|
---|
100 |
|
---|
101 | // add bytes to input buffer
|
---|
102 | _input.putBytes(msg);
|
---|
103 |
|
---|
104 | // process bytes
|
---|
105 | _update(_state, _w, _input);
|
---|
106 |
|
---|
107 | // compact input buffer every 2K or if empty
|
---|
108 | if(_input.read > 2048 || _input.length() === 0) {
|
---|
109 | _input.compact();
|
---|
110 | }
|
---|
111 |
|
---|
112 | return md;
|
---|
113 | };
|
---|
114 |
|
---|
115 | /**
|
---|
116 | * Produces the digest.
|
---|
117 | *
|
---|
118 | * @return a byte buffer containing the digest value.
|
---|
119 | */
|
---|
120 | md.digest = function() {
|
---|
121 | /* Note: Here we copy the remaining bytes in the input buffer and
|
---|
122 | add the appropriate MD5 padding. Then we do the final update
|
---|
123 | on a copy of the state so that if the user wants to get
|
---|
124 | intermediate digests they can do so. */
|
---|
125 |
|
---|
126 | /* Determine the number of bytes that must be added to the message
|
---|
127 | to ensure its length is congruent to 448 mod 512. In other words,
|
---|
128 | the data to be digested must be a multiple of 512 bits (or 128 bytes).
|
---|
129 | This data includes the message, some padding, and the length of the
|
---|
130 | message. Since the length of the message will be encoded as 8 bytes (64
|
---|
131 | bits), that means that the last segment of the data must have 56 bytes
|
---|
132 | (448 bits) of message and padding. Therefore, the length of the message
|
---|
133 | plus the padding must be congruent to 448 mod 512 because
|
---|
134 | 512 - 128 = 448.
|
---|
135 |
|
---|
136 | In order to fill up the message length it must be filled with
|
---|
137 | padding that begins with 1 bit followed by all 0 bits. Padding
|
---|
138 | must *always* be present, so if the message length is already
|
---|
139 | congruent to 448 mod 512, then 512 padding bits must be added. */
|
---|
140 |
|
---|
141 | var finalBlock = forge.util.createBuffer();
|
---|
142 | finalBlock.putBytes(_input.bytes());
|
---|
143 |
|
---|
144 | // compute remaining size to be digested (include message length size)
|
---|
145 | var remaining = (
|
---|
146 | md.fullMessageLength[md.fullMessageLength.length - 1] +
|
---|
147 | md.messageLengthSize);
|
---|
148 |
|
---|
149 | // add padding for overflow blockSize - overflow
|
---|
150 | // _padding starts with 1 byte with first bit is set (byte value 128), then
|
---|
151 | // there may be up to (blockSize - 1) other pad bytes
|
---|
152 | var overflow = remaining & (md.blockLength - 1);
|
---|
153 | finalBlock.putBytes(_padding.substr(0, md.blockLength - overflow));
|
---|
154 |
|
---|
155 | // serialize message length in bits in little-endian order; since length
|
---|
156 | // is stored in bytes we multiply by 8 and add carry
|
---|
157 | var bits, carry = 0;
|
---|
158 | for(var i = md.fullMessageLength.length - 1; i >= 0; --i) {
|
---|
159 | bits = md.fullMessageLength[i] * 8 + carry;
|
---|
160 | carry = (bits / 0x100000000) >>> 0;
|
---|
161 | finalBlock.putInt32Le(bits >>> 0);
|
---|
162 | }
|
---|
163 |
|
---|
164 | var s2 = {
|
---|
165 | h0: _state.h0,
|
---|
166 | h1: _state.h1,
|
---|
167 | h2: _state.h2,
|
---|
168 | h3: _state.h3
|
---|
169 | };
|
---|
170 | _update(s2, _w, finalBlock);
|
---|
171 | var rval = forge.util.createBuffer();
|
---|
172 | rval.putInt32Le(s2.h0);
|
---|
173 | rval.putInt32Le(s2.h1);
|
---|
174 | rval.putInt32Le(s2.h2);
|
---|
175 | rval.putInt32Le(s2.h3);
|
---|
176 | return rval;
|
---|
177 | };
|
---|
178 |
|
---|
179 | return md;
|
---|
180 | };
|
---|
181 |
|
---|
182 | // padding, constant tables for calculating md5
|
---|
183 | var _padding = null;
|
---|
184 | var _g = null;
|
---|
185 | var _r = null;
|
---|
186 | var _k = null;
|
---|
187 | var _initialized = false;
|
---|
188 |
|
---|
189 | /**
|
---|
190 | * Initializes the constant tables.
|
---|
191 | */
|
---|
192 | function _init() {
|
---|
193 | // create padding
|
---|
194 | _padding = String.fromCharCode(128);
|
---|
195 | _padding += forge.util.fillString(String.fromCharCode(0x00), 64);
|
---|
196 |
|
---|
197 | // g values
|
---|
198 | _g = [
|
---|
199 | 0, 1, 2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12, 13, 14, 15,
|
---|
200 | 1, 6, 11, 0, 5, 10, 15, 4, 9, 14, 3, 8, 13, 2, 7, 12,
|
---|
201 | 5, 8, 11, 14, 1, 4, 7, 10, 13, 0, 3, 6, 9, 12, 15, 2,
|
---|
202 | 0, 7, 14, 5, 12, 3, 10, 1, 8, 15, 6, 13, 4, 11, 2, 9];
|
---|
203 |
|
---|
204 | // rounds table
|
---|
205 | _r = [
|
---|
206 | 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22, 7, 12, 17, 22,
|
---|
207 | 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20, 5, 9, 14, 20,
|
---|
208 | 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23, 4, 11, 16, 23,
|
---|
209 | 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21, 6, 10, 15, 21];
|
---|
210 |
|
---|
211 | // get the result of abs(sin(i + 1)) as a 32-bit integer
|
---|
212 | _k = new Array(64);
|
---|
213 | for(var i = 0; i < 64; ++i) {
|
---|
214 | _k[i] = Math.floor(Math.abs(Math.sin(i + 1)) * 0x100000000);
|
---|
215 | }
|
---|
216 |
|
---|
217 | // now initialized
|
---|
218 | _initialized = true;
|
---|
219 | }
|
---|
220 |
|
---|
221 | /**
|
---|
222 | * Updates an MD5 state with the given byte buffer.
|
---|
223 | *
|
---|
224 | * @param s the MD5 state to update.
|
---|
225 | * @param w the array to use to store words.
|
---|
226 | * @param bytes the byte buffer to update with.
|
---|
227 | */
|
---|
228 | function _update(s, w, bytes) {
|
---|
229 | // consume 512 bit (64 byte) chunks
|
---|
230 | var t, a, b, c, d, f, r, i;
|
---|
231 | var len = bytes.length();
|
---|
232 | while(len >= 64) {
|
---|
233 | // initialize hash value for this chunk
|
---|
234 | a = s.h0;
|
---|
235 | b = s.h1;
|
---|
236 | c = s.h2;
|
---|
237 | d = s.h3;
|
---|
238 |
|
---|
239 | // round 1
|
---|
240 | for(i = 0; i < 16; ++i) {
|
---|
241 | w[i] = bytes.getInt32Le();
|
---|
242 | f = d ^ (b & (c ^ d));
|
---|
243 | t = (a + f + _k[i] + w[i]);
|
---|
244 | r = _r[i];
|
---|
245 | a = d;
|
---|
246 | d = c;
|
---|
247 | c = b;
|
---|
248 | b += (t << r) | (t >>> (32 - r));
|
---|
249 | }
|
---|
250 | // round 2
|
---|
251 | for(; i < 32; ++i) {
|
---|
252 | f = c ^ (d & (b ^ c));
|
---|
253 | t = (a + f + _k[i] + w[_g[i]]);
|
---|
254 | r = _r[i];
|
---|
255 | a = d;
|
---|
256 | d = c;
|
---|
257 | c = b;
|
---|
258 | b += (t << r) | (t >>> (32 - r));
|
---|
259 | }
|
---|
260 | // round 3
|
---|
261 | for(; i < 48; ++i) {
|
---|
262 | f = b ^ c ^ d;
|
---|
263 | t = (a + f + _k[i] + w[_g[i]]);
|
---|
264 | r = _r[i];
|
---|
265 | a = d;
|
---|
266 | d = c;
|
---|
267 | c = b;
|
---|
268 | b += (t << r) | (t >>> (32 - r));
|
---|
269 | }
|
---|
270 | // round 4
|
---|
271 | for(; i < 64; ++i) {
|
---|
272 | f = c ^ (b | ~d);
|
---|
273 | t = (a + f + _k[i] + w[_g[i]]);
|
---|
274 | r = _r[i];
|
---|
275 | a = d;
|
---|
276 | d = c;
|
---|
277 | c = b;
|
---|
278 | b += (t << r) | (t >>> (32 - r));
|
---|
279 | }
|
---|
280 |
|
---|
281 | // update hash state
|
---|
282 | s.h0 = (s.h0 + a) | 0;
|
---|
283 | s.h1 = (s.h1 + b) | 0;
|
---|
284 | s.h2 = (s.h2 + c) | 0;
|
---|
285 | s.h3 = (s.h3 + d) | 0;
|
---|
286 |
|
---|
287 | len -= 64;
|
---|
288 | }
|
---|
289 | }
|
---|