249 lines
6.2 KiB
JavaScript
249 lines
6.2 KiB
JavaScript
/**
|
|
* Secure Hash Algorithm with 256-bit digest (SHA-256) implementation.
|
|
*
|
|
* See FIPS 180-2 for details.
|
|
*
|
|
* @author Dave Longley
|
|
*
|
|
* Copyright (c) 2010-2015 Digital Bazaar, Inc.
|
|
*/
|
|
(function() {
|
|
/* ########## Begin module implementation ########## */
|
|
function initModule(forge) {
|
|
|
|
var sha224 = forge.sha224 = forge.sha224 || {};
|
|
|
|
// FIXME: backwards compatibility
|
|
sha224.create = function() {
|
|
return forge.md.createMessageDigest('sha224');
|
|
};
|
|
|
|
sha224.Algorithm = function() {
|
|
this.name = 'sha224',
|
|
this.blockSize = 64;
|
|
this.digestLength = 24;
|
|
this.messageLengthSize = 8;
|
|
};
|
|
|
|
sha224.Algorithm.prototype.start = function() {
|
|
if(!_initialized) {
|
|
_init();
|
|
}
|
|
return _createState();
|
|
};
|
|
|
|
sha224.Algorithm.prototype.writeMessageLength = function(
|
|
finalBlock, messageLength) {
|
|
// message length is in bits and in big-endian order; simply append
|
|
finalBlock.putBuffer(messageLength);
|
|
};
|
|
|
|
sha224.Algorithm.prototype.digest = function(s, input) {
|
|
// consume 512 bit (64 byte) chunks
|
|
var t1, t2, s0, s1, ch, maj, i, a, b, c, d, e, f, g, h;
|
|
var len = input.length();
|
|
while(len >= 64) {
|
|
// the w array will be populated with sixteen 32-bit big-endian words
|
|
// and then extended into 64 32-bit words according to SHA-256
|
|
for(i = 0; i < 16; ++i) {
|
|
_w[i] = input.getInt32();
|
|
}
|
|
for(; i < 64; ++i) {
|
|
// XOR word 2 words ago rot right 17, rot right 19, shft right 10
|
|
t1 = _w[i - 2];
|
|
t1 =
|
|
((t1 >>> 17) | (t1 << 15)) ^
|
|
((t1 >>> 19) | (t1 << 13)) ^
|
|
(t1 >>> 10);
|
|
// XOR word 15 words ago rot right 7, rot right 18, shft right 3
|
|
t2 = _w[i - 15];
|
|
t2 =
|
|
((t2 >>> 7) | (t2 << 25)) ^
|
|
((t2 >>> 18) | (t2 << 14)) ^
|
|
(t2 >>> 3);
|
|
// sum(t1, word 7 ago, t2, word 16 ago) modulo 2^32
|
|
_w[i] = (t1 + _w[i - 7] + t2 + _w[i - 16]) | 0;
|
|
}
|
|
|
|
// initialize hash value for this chunk
|
|
a = s.h0;
|
|
b = s.h1;
|
|
c = s.h2;
|
|
d = s.h3;
|
|
e = s.h4;
|
|
f = s.h5;
|
|
g = s.h6;
|
|
h = s.h7;
|
|
|
|
// round function
|
|
for(i = 0; i < 64; ++i) {
|
|
// Sum1(e)
|
|
s1 =
|
|
((e >>> 6) | (e << 26)) ^
|
|
((e >>> 11) | (e << 21)) ^
|
|
((e >>> 25) | (e << 7));
|
|
// Ch(e, f, g) (optimized the same way as SHA-1)
|
|
ch = g ^ (e & (f ^ g));
|
|
// Sum0(a)
|
|
s0 =
|
|
((a >>> 2) | (a << 30)) ^
|
|
((a >>> 13) | (a << 19)) ^
|
|
((a >>> 22) | (a << 10));
|
|
// Maj(a, b, c) (optimized the same way as SHA-1)
|
|
maj = (a & b) | (c & (a ^ b));
|
|
|
|
// main algorithm
|
|
t1 = h + s1 + ch + _k[i] + _w[i];
|
|
t2 = s0 + maj;
|
|
h = g;
|
|
g = f;
|
|
f = e;
|
|
e = (d + t1) | 0;
|
|
d = c;
|
|
c = b;
|
|
b = a;
|
|
a = (t1 + t2) | 0;
|
|
}
|
|
|
|
// update hash state
|
|
s.h0 = (s.h0 + a) | 0;
|
|
s.h1 = (s.h1 + b) | 0;
|
|
s.h2 = (s.h2 + c) | 0;
|
|
s.h3 = (s.h3 + d) | 0;
|
|
s.h4 = (s.h4 + e) | 0;
|
|
s.h5 = (s.h5 + f) | 0;
|
|
s.h6 = (s.h6 + g) | 0;
|
|
s.h7 = (s.h7 + h) | 0;
|
|
len -= 64;
|
|
}
|
|
|
|
return s;
|
|
};
|
|
|
|
forge.md.registerAlgorithm('sha224', new forge.sha224.Algorithm());
|
|
|
|
function _createState() {
|
|
var state = {
|
|
h0: 0xC1059ED8,
|
|
h1: 0x367CD507,
|
|
h2: 0x3070DD17,
|
|
h3: 0xF70E5939,
|
|
h4: 0xFFC00B31,
|
|
h5: 0x68581511,
|
|
h6: 0x64F98FA7,
|
|
h7: 0xBEFA4FA4
|
|
};
|
|
state.copy = function() {
|
|
var rval = _createState();
|
|
rval.h0 = state.h0;
|
|
rval.h1 = state.h1;
|
|
rval.h2 = state.h2;
|
|
rval.h3 = state.h3;
|
|
rval.h4 = state.h4;
|
|
rval.h5 = state.h5;
|
|
rval.h6 = state.h6;
|
|
rval.h7 = state.h7;
|
|
return rval;
|
|
};
|
|
state.write = function(buffer) {
|
|
buffer.putInt32(state.h0);
|
|
buffer.putInt32(state.h1);
|
|
buffer.putInt32(state.h2);
|
|
buffer.putInt32(state.h3);
|
|
buffer.putInt32(state.h4);
|
|
buffer.putInt32(state.h5);
|
|
buffer.putInt32(state.h6);
|
|
//buffer.putInt32(state.h7);
|
|
};
|
|
return state;
|
|
}
|
|
|
|
// shared state
|
|
var _k = null;
|
|
var _w = null;
|
|
var _initialized = false;
|
|
|
|
/**
|
|
* Initializes the constant tables.
|
|
*/
|
|
function _init() {
|
|
// create K table for SHA-256
|
|
_k = [
|
|
0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5,
|
|
0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5,
|
|
0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3,
|
|
0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174,
|
|
0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc,
|
|
0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da,
|
|
0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7,
|
|
0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967,
|
|
0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13,
|
|
0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85,
|
|
0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3,
|
|
0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070,
|
|
0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5,
|
|
0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3,
|
|
0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208,
|
|
0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2];
|
|
|
|
// used for word storage
|
|
_w = new Array(64);
|
|
|
|
// now initialized
|
|
_initialized = true;
|
|
}
|
|
|
|
} // end module implementation
|
|
|
|
/* ########## Begin module wrapper ########## */
|
|
var name = 'sha224';
|
|
if(typeof define !== 'function') {
|
|
// NodeJS -> AMD
|
|
if(typeof module === 'object' && module.exports) {
|
|
var nodeJS = true;
|
|
define = function(ids, factory) {
|
|
factory(require, module);
|
|
};
|
|
} else {
|
|
// <script>
|
|
if(typeof forge === 'undefined') {
|
|
forge = {};
|
|
}
|
|
return initModule(forge);
|
|
}
|
|
}
|
|
// AMD
|
|
var deps;
|
|
var defineFunc = function(require, module) {
|
|
module.exports = function(forge) {
|
|
var mods = deps.map(function(dep) {
|
|
return require(dep);
|
|
}).concat(initModule);
|
|
// handle circular dependencies
|
|
forge = forge || {};
|
|
forge.defined = forge.defined || {};
|
|
if(forge.defined[name]) {
|
|
return forge[name];
|
|
}
|
|
forge.defined[name] = true;
|
|
for(var i = 0; i < mods.length; ++i) {
|
|
mods[i](forge);
|
|
}
|
|
return forge[name];
|
|
};
|
|
};
|
|
var tmpDefine = define;
|
|
define = function(ids, factory) {
|
|
deps = (typeof ids === 'string') ? factory.slice(2) : ids.slice(2);
|
|
if(nodeJS) {
|
|
delete define;
|
|
return tmpDefine.apply(null, Array.prototype.slice.call(arguments, 0));
|
|
}
|
|
define = tmpDefine;
|
|
return define.apply(null, Array.prototype.slice.call(arguments, 0));
|
|
};
|
|
define(['require', 'module', './util', './md'], function() {
|
|
defineFunc.apply(null, Array.prototype.slice.call(arguments, 0));
|
|
});
|
|
})();
|