Chris@76
|
1 /*
|
Chris@76
|
2 * A JavaScript implementation of the Secure Hash Algorithm, SHA-1, as defined
|
Chris@76
|
3 * in FIPS PUB 180-1
|
Chris@76
|
4 * Version 2.1 Copyright Paul Johnston 2000 - 2002.
|
Chris@76
|
5 * Other contributors: Greg Holt, Andrew Kepert, Ydnar, Lostinet
|
Chris@76
|
6 * Distributed under the BSD License
|
Chris@76
|
7 * See http://pajhome.org.uk/crypt/md5 for details.
|
Chris@76
|
8 */
|
Chris@76
|
9
|
Chris@76
|
10 /*
|
Chris@76
|
11 * Configurable variables. You may need to tweak these to be compatible with
|
Chris@76
|
12 * the server-side, but the defaults work in most cases.
|
Chris@76
|
13 */
|
Chris@76
|
14 var hexcase = 0; /* hex output format. 0 - lowercase; 1 - uppercase */
|
Chris@76
|
15 var b64pad = ""; /* base-64 pad character. "=" for strict RFC compliance */
|
Chris@76
|
16 var chrsz = 8; /* bits per input character. 8 - ASCII; 16 - Unicode */
|
Chris@76
|
17
|
Chris@76
|
18 /*
|
Chris@76
|
19 * These are the functions you'll usually want to call
|
Chris@76
|
20 * They take string arguments and return either hex or base-64 encoded strings
|
Chris@76
|
21 */
|
Chris@76
|
22 function hex_sha1(s){return binb2hex(core_sha1(str2binb(s),s.length * chrsz));}
|
Chris@76
|
23 function b64_sha1(s){return binb2b64(core_sha1(str2binb(s),s.length * chrsz));}
|
Chris@76
|
24 function str_sha1(s){return binb2str(core_sha1(str2binb(s),s.length * chrsz));}
|
Chris@76
|
25 function hex_hmac_sha1(key, data){ return binb2hex(core_hmac_sha1(key, data));}
|
Chris@76
|
26 function b64_hmac_sha1(key, data){ return binb2b64(core_hmac_sha1(key, data));}
|
Chris@76
|
27 function str_hmac_sha1(key, data){ return binb2str(core_hmac_sha1(key, data));}
|
Chris@76
|
28
|
Chris@76
|
29 /*
|
Chris@76
|
30 * Perform a simple self-test to see if the VM is working
|
Chris@76
|
31 */
|
Chris@76
|
32 function sha1_vm_test()
|
Chris@76
|
33 {
|
Chris@76
|
34 return hex_sha1("abc") == "a9993e364706816aba3e25717850c26c9cd0d89d";
|
Chris@76
|
35 }
|
Chris@76
|
36
|
Chris@76
|
37 /*
|
Chris@76
|
38 * Calculate the SHA-1 of an array of big-endian words, and a bit length
|
Chris@76
|
39 */
|
Chris@76
|
40 function core_sha1(x, len)
|
Chris@76
|
41 {
|
Chris@76
|
42 /* append padding */
|
Chris@76
|
43 x[len >> 5] |= 0x80 << (24 - len % 32);
|
Chris@76
|
44 x[((len + 64 >> 9) << 4) + 15] = len;
|
Chris@76
|
45
|
Chris@76
|
46 var w = Array(80);
|
Chris@76
|
47 var a = 1732584193;
|
Chris@76
|
48 var b = -271733879;
|
Chris@76
|
49 var c = -1732584194;
|
Chris@76
|
50 var d = 271733878;
|
Chris@76
|
51 var e = -1009589776;
|
Chris@76
|
52
|
Chris@76
|
53 for (var i = 0; i < x.length; i += 16)
|
Chris@76
|
54 {
|
Chris@76
|
55 var olda = a;
|
Chris@76
|
56 var oldb = b;
|
Chris@76
|
57 var oldc = c;
|
Chris@76
|
58 var oldd = d;
|
Chris@76
|
59 var olde = e;
|
Chris@76
|
60
|
Chris@76
|
61 for (var j = 0; j < 80; j++)
|
Chris@76
|
62 {
|
Chris@76
|
63 if (j < 16) w[j] = x[i + j];
|
Chris@76
|
64 else w[j] = rol(w[j-3] ^ w[j-8] ^ w[j-14] ^ w[j-16], 1);
|
Chris@76
|
65 var t = safe_add(safe_add(rol(a, 5), sha1_ft(j, b, c, d)), safe_add(safe_add(e, w[j]), sha1_kt(j)));
|
Chris@76
|
66 e = d;
|
Chris@76
|
67 d = c;
|
Chris@76
|
68 c = rol(b, 30);
|
Chris@76
|
69 b = a;
|
Chris@76
|
70 a = t;
|
Chris@76
|
71 }
|
Chris@76
|
72
|
Chris@76
|
73 a = safe_add(a, olda);
|
Chris@76
|
74 b = safe_add(b, oldb);
|
Chris@76
|
75 c = safe_add(c, oldc);
|
Chris@76
|
76 d = safe_add(d, oldd);
|
Chris@76
|
77 e = safe_add(e, olde);
|
Chris@76
|
78 }
|
Chris@76
|
79 return Array(a, b, c, d, e);
|
Chris@76
|
80 }
|
Chris@76
|
81
|
Chris@76
|
82 /*
|
Chris@76
|
83 * Perform the appropriate triplet combination function for the current
|
Chris@76
|
84 * iteration
|
Chris@76
|
85 */
|
Chris@76
|
86 function sha1_ft(t, b, c, d)
|
Chris@76
|
87 {
|
Chris@76
|
88 if (t < 20) return (b & c) | ((~b) & d);
|
Chris@76
|
89 if (t < 40) return b ^ c ^ d;
|
Chris@76
|
90 if (t < 60) return (b & c) | (b & d) | (c & d);
|
Chris@76
|
91 return b ^ c ^ d;
|
Chris@76
|
92 }
|
Chris@76
|
93
|
Chris@76
|
94 /*
|
Chris@76
|
95 * Determine the appropriate additive constant for the current iteration
|
Chris@76
|
96 */
|
Chris@76
|
97 function sha1_kt(t)
|
Chris@76
|
98 {
|
Chris@76
|
99 return (t < 20) ? 1518500249 : (t < 40) ? 1859775393 :
|
Chris@76
|
100 (t < 60) ? -1894007588 : -899497514;
|
Chris@76
|
101 }
|
Chris@76
|
102
|
Chris@76
|
103 /*
|
Chris@76
|
104 * Calculate the HMAC-SHA1 of a key and some data
|
Chris@76
|
105 */
|
Chris@76
|
106 function core_hmac_sha1(key, data)
|
Chris@76
|
107 {
|
Chris@76
|
108 var bkey = str2binb(key);
|
Chris@76
|
109 if (bkey.length > 16) bkey = core_sha1(bkey, key.length * chrsz);
|
Chris@76
|
110
|
Chris@76
|
111 var ipad = Array(16), opad = Array(16);
|
Chris@76
|
112 for (var i = 0; i < 16; i++)
|
Chris@76
|
113 {
|
Chris@76
|
114 ipad[i] = bkey[i] ^ 0x36363636;
|
Chris@76
|
115 opad[i] = bkey[i] ^ 0x5C5C5C5C;
|
Chris@76
|
116 }
|
Chris@76
|
117
|
Chris@76
|
118 var hash = core_sha1(ipad.concat(str2binb(data)), 512 + data.length * chrsz);
|
Chris@76
|
119 return core_sha1(opad.concat(hash), 512 + 160);
|
Chris@76
|
120 }
|
Chris@76
|
121
|
Chris@76
|
122 /*
|
Chris@76
|
123 * Add integers, wrapping at 2^32. This uses 16-bit operations internally
|
Chris@76
|
124 * to work around bugs in some JS interpreters.
|
Chris@76
|
125 */
|
Chris@76
|
126 function safe_add(x, y)
|
Chris@76
|
127 {
|
Chris@76
|
128 var lsw = (x & 0xFFFF) + (y & 0xFFFF);
|
Chris@76
|
129 var msw = (x >> 16) + (y >> 16) + (lsw >> 16);
|
Chris@76
|
130 return (msw << 16) | (lsw & 0xFFFF);
|
Chris@76
|
131 }
|
Chris@76
|
132
|
Chris@76
|
133 /*
|
Chris@76
|
134 * Bitwise rotate a 32-bit number to the left.
|
Chris@76
|
135 */
|
Chris@76
|
136 function rol(num, cnt)
|
Chris@76
|
137 {
|
Chris@76
|
138 return (num << cnt) | (num >>> (32 - cnt));
|
Chris@76
|
139 }
|
Chris@76
|
140
|
Chris@76
|
141 /*
|
Chris@76
|
142 * Convert an 8-bit or 16-bit string to an array of big-endian words
|
Chris@76
|
143 * In 8-bit function, characters >255 have their hi-byte silently ignored.
|
Chris@76
|
144 */
|
Chris@76
|
145 function str2binb(str)
|
Chris@76
|
146 {
|
Chris@76
|
147 var bin = Array();
|
Chris@76
|
148
|
Chris@76
|
149 for (var i = 0, n = 1 + ((str.length * chrsz) >> 5); i < n; i++)
|
Chris@76
|
150 bin[i] = 0;
|
Chris@76
|
151
|
Chris@76
|
152 var mask = (1 << chrsz) - 1;
|
Chris@76
|
153 for (var i = 0; i < str.length * chrsz; i += chrsz)
|
Chris@76
|
154 bin[i >> 5] |= (str.charCodeAt(i / chrsz) & mask) << (24 - i % 32);
|
Chris@76
|
155 return bin;
|
Chris@76
|
156 }
|
Chris@76
|
157
|
Chris@76
|
158 /*
|
Chris@76
|
159 * Convert an array of big-endian words to a string
|
Chris@76
|
160 */
|
Chris@76
|
161 function binb2str(bin)
|
Chris@76
|
162 {
|
Chris@76
|
163 var str = "";
|
Chris@76
|
164 var mask = (1 << chrsz) - 1;
|
Chris@76
|
165 for (var i = 0; i < bin.length * 32; i += chrsz)
|
Chris@76
|
166 str += String.fromCharCode((bin[i>>5] >>> (24 - i%32)) & mask);
|
Chris@76
|
167 return str;
|
Chris@76
|
168 }
|
Chris@76
|
169
|
Chris@76
|
170 /*
|
Chris@76
|
171 * Convert an array of big-endian words to a hex string.
|
Chris@76
|
172 */
|
Chris@76
|
173 function binb2hex(binarray)
|
Chris@76
|
174 {
|
Chris@76
|
175 var hex_tab = hexcase ? "0123456789ABCDEF" : "0123456789abcdef";
|
Chris@76
|
176 var str = "";
|
Chris@76
|
177 for (var i = 0; i < binarray.length * 4; i++)
|
Chris@76
|
178 {
|
Chris@76
|
179 str += hex_tab.charAt((binarray[i>>2] >> ((3 - i%4)*8+4)) & 0xF) +
|
Chris@76
|
180 hex_tab.charAt((binarray[i>>2] >> ((3 - i%4)*8 )) & 0xF);
|
Chris@76
|
181 }
|
Chris@76
|
182 return str;
|
Chris@76
|
183 }
|
Chris@76
|
184
|
Chris@76
|
185 /*
|
Chris@76
|
186 * Convert an array of big-endian words to a base-64 string
|
Chris@76
|
187 */
|
Chris@76
|
188 function binb2b64(binarray)
|
Chris@76
|
189 {
|
Chris@76
|
190 var tab = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
|
Chris@76
|
191 var str = "";
|
Chris@76
|
192 for (var i = 0; i < binarray.length * 4; i += 3)
|
Chris@76
|
193 {
|
Chris@76
|
194 var triplet = (((binarray[i >> 2] >> 8 * (3 - i %4)) & 0xFF) << 16)
|
Chris@76
|
195 | (((binarray[i+1 >> 2] >> 8 * (3 - (i+1)%4)) & 0xFF) << 8 )
|
Chris@76
|
196 | ((binarray[i+2 >> 2] >> 8 * (3 - (i+2)%4)) & 0xFF);
|
Chris@76
|
197 for (var j = 0; j < 4; j++)
|
Chris@76
|
198 {
|
Chris@76
|
199 if (i * 8 + j * 6 > binarray.length * 32) str += b64pad;
|
Chris@76
|
200 else str += tab.charAt((triplet >> 6*(3-j)) & 0x3F);
|
Chris@76
|
201 }
|
Chris@76
|
202 }
|
Chris@76
|
203 return str;
|
Chris@76
|
204 }
|
Chris@76
|
205
|