sync-browser.js 2.9 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131
  1. 'use strict';
  2. var md5 = require('create-hash/md5');
  3. var RIPEMD160 = require('ripemd160');
  4. var sha = require('sha.js');
  5. var Buffer = require('safe-buffer').Buffer;
  6. var checkParameters = require('./precondition');
  7. var defaultEncoding = require('./default-encoding');
  8. var toBuffer = require('./to-buffer');
  9. var ZEROS = Buffer.alloc(128);
  10. var sizes = {
  11. __proto__: null,
  12. md5: 16,
  13. sha1: 20,
  14. sha224: 28,
  15. sha256: 32,
  16. sha384: 48,
  17. sha512: 64,
  18. 'sha512-256': 32,
  19. ripemd160: 20,
  20. rmd160: 20
  21. };
  22. var mapping = {
  23. __proto__: null,
  24. 'sha-1': 'sha1',
  25. 'sha-224': 'sha224',
  26. 'sha-256': 'sha256',
  27. 'sha-384': 'sha384',
  28. 'sha-512': 'sha512',
  29. 'ripemd-160': 'ripemd160'
  30. };
  31. function rmd160Func(data) {
  32. return new RIPEMD160().update(data).digest();
  33. }
  34. function getDigest(alg) {
  35. function shaFunc(data) {
  36. return sha(alg).update(data).digest();
  37. }
  38. if (alg === 'rmd160' || alg === 'ripemd160') {
  39. return rmd160Func;
  40. }
  41. if (alg === 'md5') {
  42. return md5;
  43. }
  44. return shaFunc;
  45. }
  46. function Hmac(alg, key, saltLen) {
  47. var hash = getDigest(alg);
  48. var blocksize = alg === 'sha512' || alg === 'sha384' ? 128 : 64;
  49. if (key.length > blocksize) {
  50. key = hash(key);
  51. } else if (key.length < blocksize) {
  52. key = Buffer.concat([key, ZEROS], blocksize);
  53. }
  54. var ipad = Buffer.allocUnsafe(blocksize + sizes[alg]);
  55. var opad = Buffer.allocUnsafe(blocksize + sizes[alg]);
  56. for (var i = 0; i < blocksize; i++) {
  57. ipad[i] = key[i] ^ 0x36;
  58. opad[i] = key[i] ^ 0x5C;
  59. }
  60. var ipad1 = Buffer.allocUnsafe(blocksize + saltLen + 4);
  61. ipad.copy(ipad1, 0, 0, blocksize);
  62. this.ipad1 = ipad1;
  63. this.ipad2 = ipad;
  64. this.opad = opad;
  65. this.alg = alg;
  66. this.blocksize = blocksize;
  67. this.hash = hash;
  68. this.size = sizes[alg];
  69. }
  70. Hmac.prototype.run = function (data, ipad) {
  71. data.copy(ipad, this.blocksize);
  72. var h = this.hash(ipad);
  73. h.copy(this.opad, this.blocksize);
  74. return this.hash(this.opad);
  75. };
  76. function pbkdf2(password, salt, iterations, keylen, digest) {
  77. checkParameters(iterations, keylen);
  78. password = toBuffer(password, defaultEncoding, 'Password');
  79. salt = toBuffer(salt, defaultEncoding, 'Salt');
  80. var lowerDigest = (digest || 'sha1').toLowerCase();
  81. var mappedDigest = mapping[lowerDigest] || lowerDigest;
  82. var size = sizes[mappedDigest];
  83. if (typeof size !== 'number' || !size) {
  84. throw new TypeError('Digest algorithm not supported: ' + digest);
  85. }
  86. var hmac = new Hmac(mappedDigest, password, salt.length);
  87. var DK = Buffer.allocUnsafe(keylen);
  88. var block1 = Buffer.allocUnsafe(salt.length + 4);
  89. salt.copy(block1, 0, 0, salt.length);
  90. var destPos = 0;
  91. var hLen = size;
  92. var l = Math.ceil(keylen / hLen);
  93. for (var i = 1; i <= l; i++) {
  94. block1.writeUInt32BE(i, salt.length);
  95. var T = hmac.run(block1, hmac.ipad1);
  96. var U = T;
  97. for (var j = 1; j < iterations; j++) {
  98. U = hmac.run(U, hmac.ipad2);
  99. for (var k = 0; k < hLen; k++) {
  100. T[k] ^= U[k];
  101. }
  102. }
  103. T.copy(DK, destPos);
  104. destPos += hLen;
  105. }
  106. return DK;
  107. }
  108. module.exports = pbkdf2;