sha512.js (12773B)
1 (function () { 2 // Shortcuts 3 var C = CryptoJS; 4 var C_lib = C.lib; 5 var Hasher = C_lib.Hasher; 6 var C_x64 = C.x64; 7 var X64Word = C_x64.Word; 8 var X64WordArray = C_x64.WordArray; 9 var C_algo = C.algo; 10 11 function X64Word_create() { 12 return X64Word.create.apply(X64Word, arguments); 13 } 14 15 // Constants 16 var K = [ 17 X64Word_create(0x428a2f98, 0xd728ae22), X64Word_create(0x71374491, 0x23ef65cd), 18 X64Word_create(0xb5c0fbcf, 0xec4d3b2f), X64Word_create(0xe9b5dba5, 0x8189dbbc), 19 X64Word_create(0x3956c25b, 0xf348b538), X64Word_create(0x59f111f1, 0xb605d019), 20 X64Word_create(0x923f82a4, 0xaf194f9b), X64Word_create(0xab1c5ed5, 0xda6d8118), 21 X64Word_create(0xd807aa98, 0xa3030242), X64Word_create(0x12835b01, 0x45706fbe), 22 X64Word_create(0x243185be, 0x4ee4b28c), X64Word_create(0x550c7dc3, 0xd5ffb4e2), 23 X64Word_create(0x72be5d74, 0xf27b896f), X64Word_create(0x80deb1fe, 0x3b1696b1), 24 X64Word_create(0x9bdc06a7, 0x25c71235), X64Word_create(0xc19bf174, 0xcf692694), 25 X64Word_create(0xe49b69c1, 0x9ef14ad2), X64Word_create(0xefbe4786, 0x384f25e3), 26 X64Word_create(0x0fc19dc6, 0x8b8cd5b5), X64Word_create(0x240ca1cc, 0x77ac9c65), 27 X64Word_create(0x2de92c6f, 0x592b0275), X64Word_create(0x4a7484aa, 0x6ea6e483), 28 X64Word_create(0x5cb0a9dc, 0xbd41fbd4), X64Word_create(0x76f988da, 0x831153b5), 29 X64Word_create(0x983e5152, 0xee66dfab), X64Word_create(0xa831c66d, 0x2db43210), 30 X64Word_create(0xb00327c8, 0x98fb213f), X64Word_create(0xbf597fc7, 0xbeef0ee4), 31 X64Word_create(0xc6e00bf3, 0x3da88fc2), X64Word_create(0xd5a79147, 0x930aa725), 32 X64Word_create(0x06ca6351, 0xe003826f), X64Word_create(0x14292967, 0x0a0e6e70), 33 X64Word_create(0x27b70a85, 0x46d22ffc), X64Word_create(0x2e1b2138, 0x5c26c926), 34 X64Word_create(0x4d2c6dfc, 0x5ac42aed), X64Word_create(0x53380d13, 0x9d95b3df), 35 X64Word_create(0x650a7354, 0x8baf63de), X64Word_create(0x766a0abb, 0x3c77b2a8), 36 X64Word_create(0x81c2c92e, 0x47edaee6), X64Word_create(0x92722c85, 0x1482353b), 37 X64Word_create(0xa2bfe8a1, 0x4cf10364), X64Word_create(0xa81a664b, 0xbc423001), 38 X64Word_create(0xc24b8b70, 0xd0f89791), X64Word_create(0xc76c51a3, 0x0654be30), 39 X64Word_create(0xd192e819, 0xd6ef5218), X64Word_create(0xd6990624, 0x5565a910), 40 X64Word_create(0xf40e3585, 0x5771202a), X64Word_create(0x106aa070, 0x32bbd1b8), 41 X64Word_create(0x19a4c116, 0xb8d2d0c8), X64Word_create(0x1e376c08, 0x5141ab53), 42 X64Word_create(0x2748774c, 0xdf8eeb99), X64Word_create(0x34b0bcb5, 0xe19b48a8), 43 X64Word_create(0x391c0cb3, 0xc5c95a63), X64Word_create(0x4ed8aa4a, 0xe3418acb), 44 X64Word_create(0x5b9cca4f, 0x7763e373), X64Word_create(0x682e6ff3, 0xd6b2b8a3), 45 X64Word_create(0x748f82ee, 0x5defb2fc), X64Word_create(0x78a5636f, 0x43172f60), 46 X64Word_create(0x84c87814, 0xa1f0ab72), X64Word_create(0x8cc70208, 0x1a6439ec), 47 X64Word_create(0x90befffa, 0x23631e28), X64Word_create(0xa4506ceb, 0xde82bde9), 48 X64Word_create(0xbef9a3f7, 0xb2c67915), X64Word_create(0xc67178f2, 0xe372532b), 49 X64Word_create(0xca273ece, 0xea26619c), X64Word_create(0xd186b8c7, 0x21c0c207), 50 X64Word_create(0xeada7dd6, 0xcde0eb1e), X64Word_create(0xf57d4f7f, 0xee6ed178), 51 X64Word_create(0x06f067aa, 0x72176fba), X64Word_create(0x0a637dc5, 0xa2c898a6), 52 X64Word_create(0x113f9804, 0xbef90dae), X64Word_create(0x1b710b35, 0x131c471b), 53 X64Word_create(0x28db77f5, 0x23047d84), X64Word_create(0x32caab7b, 0x40c72493), 54 X64Word_create(0x3c9ebe0a, 0x15c9bebc), X64Word_create(0x431d67c4, 0x9c100d4c), 55 X64Word_create(0x4cc5d4be, 0xcb3e42b6), X64Word_create(0x597f299c, 0xfc657e2a), 56 X64Word_create(0x5fcb6fab, 0x3ad6faec), X64Word_create(0x6c44198c, 0x4a475817) 57 ]; 58 59 // Reusable objects 60 var W = []; 61 (function () { 62 for (var i = 0; i < 80; i++) { 63 W[i] = X64Word_create(); 64 } 65 }()); 66 67 /** 68 * SHA-512 hash algorithm. 69 */ 70 var SHA512 = C_algo.SHA512 = Hasher.extend({ 71 _doReset: function () { 72 this._hash = new X64WordArray.init([ 73 new X64Word.init(0x6a09e667, 0xf3bcc908), new X64Word.init(0xbb67ae85, 0x84caa73b), 74 new X64Word.init(0x3c6ef372, 0xfe94f82b), new X64Word.init(0xa54ff53a, 0x5f1d36f1), 75 new X64Word.init(0x510e527f, 0xade682d1), new X64Word.init(0x9b05688c, 0x2b3e6c1f), 76 new X64Word.init(0x1f83d9ab, 0xfb41bd6b), new X64Word.init(0x5be0cd19, 0x137e2179) 77 ]); 78 }, 79 80 _doProcessBlock: function (M, offset) { 81 // Shortcuts 82 var H = this._hash.words; 83 84 var H0 = H[0]; 85 var H1 = H[1]; 86 var H2 = H[2]; 87 var H3 = H[3]; 88 var H4 = H[4]; 89 var H5 = H[5]; 90 var H6 = H[6]; 91 var H7 = H[7]; 92 93 var H0h = H0.high; 94 var H0l = H0.low; 95 var H1h = H1.high; 96 var H1l = H1.low; 97 var H2h = H2.high; 98 var H2l = H2.low; 99 var H3h = H3.high; 100 var H3l = H3.low; 101 var H4h = H4.high; 102 var H4l = H4.low; 103 var H5h = H5.high; 104 var H5l = H5.low; 105 var H6h = H6.high; 106 var H6l = H6.low; 107 var H7h = H7.high; 108 var H7l = H7.low; 109 110 // Working variables 111 var ah = H0h; 112 var al = H0l; 113 var bh = H1h; 114 var bl = H1l; 115 var ch = H2h; 116 var cl = H2l; 117 var dh = H3h; 118 var dl = H3l; 119 var eh = H4h; 120 var el = H4l; 121 var fh = H5h; 122 var fl = H5l; 123 var gh = H6h; 124 var gl = H6l; 125 var hh = H7h; 126 var hl = H7l; 127 128 // Rounds 129 for (var i = 0; i < 80; i++) { 130 // Shortcut 131 var Wi = W[i]; 132 133 // Extend message 134 if (i < 16) { 135 var Wih = Wi.high = M[offset + i * 2] | 0; 136 var Wil = Wi.low = M[offset + i * 2 + 1] | 0; 137 } else { 138 // Gamma0 139 var gamma0x = W[i - 15]; 140 var gamma0xh = gamma0x.high; 141 var gamma0xl = gamma0x.low; 142 var gamma0h = ((gamma0xh >>> 1) | (gamma0xl << 31)) ^ ((gamma0xh >>> 8) | (gamma0xl << 24)) ^ (gamma0xh >>> 7); 143 var gamma0l = ((gamma0xl >>> 1) | (gamma0xh << 31)) ^ ((gamma0xl >>> 8) | (gamma0xh << 24)) ^ ((gamma0xl >>> 7) | (gamma0xh << 25)); 144 145 // Gamma1 146 var gamma1x = W[i - 2]; 147 var gamma1xh = gamma1x.high; 148 var gamma1xl = gamma1x.low; 149 var gamma1h = ((gamma1xh >>> 19) | (gamma1xl << 13)) ^ ((gamma1xh << 3) | (gamma1xl >>> 29)) ^ (gamma1xh >>> 6); 150 var gamma1l = ((gamma1xl >>> 19) | (gamma1xh << 13)) ^ ((gamma1xl << 3) | (gamma1xh >>> 29)) ^ ((gamma1xl >>> 6) | (gamma1xh << 26)); 151 152 // W[i] = gamma0 + W[i - 7] + gamma1 + W[i - 16] 153 var Wi7 = W[i - 7]; 154 var Wi7h = Wi7.high; 155 var Wi7l = Wi7.low; 156 157 var Wi16 = W[i - 16]; 158 var Wi16h = Wi16.high; 159 var Wi16l = Wi16.low; 160 161 var Wil = gamma0l + Wi7l; 162 var Wih = gamma0h + Wi7h + ((Wil >>> 0) < (gamma0l >>> 0) ? 1 : 0); 163 var Wil = Wil + gamma1l; 164 var Wih = Wih + gamma1h + ((Wil >>> 0) < (gamma1l >>> 0) ? 1 : 0); 165 var Wil = Wil + Wi16l; 166 var Wih = Wih + Wi16h + ((Wil >>> 0) < (Wi16l >>> 0) ? 1 : 0); 167 168 Wi.high = Wih; 169 Wi.low = Wil; 170 } 171 172 var chh = (eh & fh) ^ (~eh & gh); 173 var chl = (el & fl) ^ (~el & gl); 174 var majh = (ah & bh) ^ (ah & ch) ^ (bh & ch); 175 var majl = (al & bl) ^ (al & cl) ^ (bl & cl); 176 177 var sigma0h = ((ah >>> 28) | (al << 4)) ^ ((ah << 30) | (al >>> 2)) ^ ((ah << 25) | (al >>> 7)); 178 var sigma0l = ((al >>> 28) | (ah << 4)) ^ ((al << 30) | (ah >>> 2)) ^ ((al << 25) | (ah >>> 7)); 179 var sigma1h = ((eh >>> 14) | (el << 18)) ^ ((eh >>> 18) | (el << 14)) ^ ((eh << 23) | (el >>> 9)); 180 var sigma1l = ((el >>> 14) | (eh << 18)) ^ ((el >>> 18) | (eh << 14)) ^ ((el << 23) | (eh >>> 9)); 181 182 // t1 = h + sigma1 + ch + K[i] + W[i] 183 var Ki = K[i]; 184 var Kih = Ki.high; 185 var Kil = Ki.low; 186 187 var t1l = hl + sigma1l; 188 var t1h = hh + sigma1h + ((t1l >>> 0) < (hl >>> 0) ? 1 : 0); 189 var t1l = t1l + chl; 190 var t1h = t1h + chh + ((t1l >>> 0) < (chl >>> 0) ? 1 : 0); 191 var t1l = t1l + Kil; 192 var t1h = t1h + Kih + ((t1l >>> 0) < (Kil >>> 0) ? 1 : 0); 193 var t1l = t1l + Wil; 194 var t1h = t1h + Wih + ((t1l >>> 0) < (Wil >>> 0) ? 1 : 0); 195 196 // t2 = sigma0 + maj 197 var t2l = sigma0l + majl; 198 var t2h = sigma0h + majh + ((t2l >>> 0) < (sigma0l >>> 0) ? 1 : 0); 199 200 // Update working variables 201 hh = gh; 202 hl = gl; 203 gh = fh; 204 gl = fl; 205 fh = eh; 206 fl = el; 207 el = (dl + t1l) | 0; 208 eh = (dh + t1h + ((el >>> 0) < (dl >>> 0) ? 1 : 0)) | 0; 209 dh = ch; 210 dl = cl; 211 ch = bh; 212 cl = bl; 213 bh = ah; 214 bl = al; 215 al = (t1l + t2l) | 0; 216 ah = (t1h + t2h + ((al >>> 0) < (t1l >>> 0) ? 1 : 0)) | 0; 217 } 218 219 // Intermediate hash value 220 H0l = H0.low = (H0l + al); 221 H0.high = (H0h + ah + ((H0l >>> 0) < (al >>> 0) ? 1 : 0)); 222 H1l = H1.low = (H1l + bl); 223 H1.high = (H1h + bh + ((H1l >>> 0) < (bl >>> 0) ? 1 : 0)); 224 H2l = H2.low = (H2l + cl); 225 H2.high = (H2h + ch + ((H2l >>> 0) < (cl >>> 0) ? 1 : 0)); 226 H3l = H3.low = (H3l + dl); 227 H3.high = (H3h + dh + ((H3l >>> 0) < (dl >>> 0) ? 1 : 0)); 228 H4l = H4.low = (H4l + el); 229 H4.high = (H4h + eh + ((H4l >>> 0) < (el >>> 0) ? 1 : 0)); 230 H5l = H5.low = (H5l + fl); 231 H5.high = (H5h + fh + ((H5l >>> 0) < (fl >>> 0) ? 1 : 0)); 232 H6l = H6.low = (H6l + gl); 233 H6.high = (H6h + gh + ((H6l >>> 0) < (gl >>> 0) ? 1 : 0)); 234 H7l = H7.low = (H7l + hl); 235 H7.high = (H7h + hh + ((H7l >>> 0) < (hl >>> 0) ? 1 : 0)); 236 }, 237 238 _doFinalize: function () { 239 // Shortcuts 240 var data = this._data; 241 var dataWords = data.words; 242 243 var nBitsTotal = this._nDataBytes * 8; 244 var nBitsLeft = data.sigBytes * 8; 245 246 // Add padding 247 dataWords[nBitsLeft >>> 5] |= 0x80 << (24 - nBitsLeft % 32); 248 dataWords[(((nBitsLeft + 128) >>> 10) << 5) + 30] = Math.floor(nBitsTotal / 0x100000000); 249 dataWords[(((nBitsLeft + 128) >>> 10) << 5) + 31] = nBitsTotal; 250 data.sigBytes = dataWords.length * 4; 251 252 // Hash final blocks 253 this._process(); 254 255 // Convert hash to 32-bit word array before returning 256 var hash = this._hash.toX32(); 257 258 // Return final computed hash 259 return hash; 260 }, 261 262 clone: function () { 263 var clone = Hasher.clone.call(this); 264 clone._hash = this._hash.clone(); 265 266 return clone; 267 }, 268 269 blockSize: 1024/32 270 }); 271 272 /** 273 * Shortcut function to the hasher's object interface. 274 * 275 * @param {WordArray|string} message The message to hash. 276 * 277 * @return {WordArray} The hash. 278 * 279 * @static 280 * 281 * @example 282 * 283 * var hash = CryptoJS.SHA512('message'); 284 * var hash = CryptoJS.SHA512(wordArray); 285 */ 286 C.SHA512 = Hasher._createHelper(SHA512); 287 288 /** 289 * Shortcut function to the HMAC's object interface. 290 * 291 * @param {WordArray|string} message The message to hash. 292 * @param {WordArray|string} key The secret key. 293 * 294 * @return {WordArray} The HMAC. 295 * 296 * @static 297 * 298 * @example 299 * 300 * var hmac = CryptoJS.HmacSHA512(message, key); 301 */ 302 C.HmacSHA512 = Hasher._createHmacHelper(SHA512); 303 }());