| 123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131 |
- 'use strict';
- var md5 = require('create-hash/md5');
- var RIPEMD160 = require('ripemd160');
- var sha = require('sha.js');
- var Buffer = require('safe-buffer').Buffer;
- var checkParameters = require('./precondition');
- var defaultEncoding = require('./default-encoding');
- var toBuffer = require('./to-buffer');
- var ZEROS = Buffer.alloc(128);
- var sizes = {
- __proto__: null,
- md5: 16,
- sha1: 20,
- sha224: 28,
- sha256: 32,
- sha384: 48,
- sha512: 64,
- 'sha512-256': 32,
- ripemd160: 20,
- rmd160: 20
- };
- var mapping = {
- __proto__: null,
- 'sha-1': 'sha1',
- 'sha-224': 'sha224',
- 'sha-256': 'sha256',
- 'sha-384': 'sha384',
- 'sha-512': 'sha512',
- 'ripemd-160': 'ripemd160'
- };
- function rmd160Func(data) {
- return new RIPEMD160().update(data).digest();
- }
- function getDigest(alg) {
- function shaFunc(data) {
- return sha(alg).update(data).digest();
- }
- if (alg === 'rmd160' || alg === 'ripemd160') {
- return rmd160Func;
- }
- if (alg === 'md5') {
- return md5;
- }
- return shaFunc;
- }
- function Hmac(alg, key, saltLen) {
- var hash = getDigest(alg);
- var blocksize = alg === 'sha512' || alg === 'sha384' ? 128 : 64;
- if (key.length > blocksize) {
- key = hash(key);
- } else if (key.length < blocksize) {
- key = Buffer.concat([key, ZEROS], blocksize);
- }
- var ipad = Buffer.allocUnsafe(blocksize + sizes[alg]);
- var opad = Buffer.allocUnsafe(blocksize + sizes[alg]);
- for (var i = 0; i < blocksize; i++) {
- ipad[i] = key[i] ^ 0x36;
- opad[i] = key[i] ^ 0x5C;
- }
- var ipad1 = Buffer.allocUnsafe(blocksize + saltLen + 4);
- ipad.copy(ipad1, 0, 0, blocksize);
- this.ipad1 = ipad1;
- this.ipad2 = ipad;
- this.opad = opad;
- this.alg = alg;
- this.blocksize = blocksize;
- this.hash = hash;
- this.size = sizes[alg];
- }
- Hmac.prototype.run = function (data, ipad) {
- data.copy(ipad, this.blocksize);
- var h = this.hash(ipad);
- h.copy(this.opad, this.blocksize);
- return this.hash(this.opad);
- };
- function pbkdf2(password, salt, iterations, keylen, digest) {
- checkParameters(iterations, keylen);
- password = toBuffer(password, defaultEncoding, 'Password');
- salt = toBuffer(salt, defaultEncoding, 'Salt');
- var lowerDigest = (digest || 'sha1').toLowerCase();
- var mappedDigest = mapping[lowerDigest] || lowerDigest;
- var size = sizes[mappedDigest];
- if (typeof size !== 'number' || !size) {
- throw new TypeError('Digest algorithm not supported: ' + digest);
- }
- var hmac = new Hmac(mappedDigest, password, salt.length);
- var DK = Buffer.allocUnsafe(keylen);
- var block1 = Buffer.allocUnsafe(salt.length + 4);
- salt.copy(block1, 0, 0, salt.length);
- var destPos = 0;
- var hLen = size;
- var l = Math.ceil(keylen / hLen);
- for (var i = 1; i <= l; i++) {
- block1.writeUInt32BE(i, salt.length);
- var T = hmac.run(block1, hmac.ipad1);
- var U = T;
- for (var j = 1; j < iterations; j++) {
- U = hmac.run(U, hmac.ipad2);
- for (var k = 0; k < hLen; k++) {
- T[k] ^= U[k];
- }
- }
- T.copy(DK, destPos);
- destPos += hLen;
- }
- return DK;
- }
- module.exports = pbkdf2;
|