|
| 1 | +//================================================================ |
| 2 | +// SHA256.js |
| 3 | +// |
| 4 | +// Module that replicates the SHA-256 Cryptographic Hash |
| 5 | +// function in Javascript. |
| 6 | +//================================================================ |
| 7 | + |
| 8 | +//main variables |
| 9 | +const CHAR_SIZE = 8; |
| 10 | + |
| 11 | +const K = [ |
| 12 | + 0x428a2f98, 0x71374491, 0xb5c0fbcf, 0xe9b5dba5, 0x3956c25b, 0x59f111f1, 0x923f82a4, 0xab1c5ed5, |
| 13 | + 0xd807aa98, 0x12835b01, 0x243185be, 0x550c7dc3, 0x72be5d74, 0x80deb1fe, 0x9bdc06a7, 0xc19bf174, |
| 14 | + 0xe49b69c1, 0xefbe4786, 0x0fc19dc6, 0x240ca1cc, 0x2de92c6f, 0x4a7484aa, 0x5cb0a9dc, 0x76f988da, |
| 15 | + 0x983e5152, 0xa831c66d, 0xb00327c8, 0xbf597fc7, 0xc6e00bf3, 0xd5a79147, 0x06ca6351, 0x14292967, |
| 16 | + 0x27b70a85, 0x2e1b2138, 0x4d2c6dfc, 0x53380d13, 0x650a7354, 0x766a0abb, 0x81c2c92e, 0x92722c85, |
| 17 | + 0xa2bfe8a1, 0xa81a664b, 0xc24b8b70, 0xc76c51a3, 0xd192e819, 0xd6990624, 0xf40e3585, 0x106aa070, |
| 18 | + 0x19a4c116, 0x1e376c08, 0x2748774c, 0x34b0bcb5, 0x391c0cb3, 0x4ed8aa4a, 0x5b9cca4f, 0x682e6ff3, |
| 19 | + 0x748f82ee, 0x78a5636f, 0x84c87814, 0x8cc70208, 0x90befffa, 0xa4506ceb, 0xbef9a3f7, 0xc67178f2 |
| 20 | +]; |
| 21 | + |
| 22 | +/** |
| 23 | + * Adds padding to binary/hex string represention |
| 24 | + * |
| 25 | + * @param {string} str - string represention (binary/hex) |
| 26 | + * @param {int} bits - total number of bits wanted |
| 27 | + * @return {string} - string represention padding with empty (0) bits |
| 28 | + * |
| 29 | + * @example |
| 30 | + * pad("10011", 8); // "00010011" |
| 31 | + */ |
| 32 | +function pad(str, bits) { |
| 33 | + let res = str; |
| 34 | + while (res.length % bits !== 0) { |
| 35 | + res = "0" + res; |
| 36 | + } |
| 37 | + return res; |
| 38 | +} |
| 39 | + |
| 40 | +/** |
| 41 | + * Separates string into chunks of the same size |
| 42 | + * |
| 43 | + * @param {string} str - string to separate into chunks |
| 44 | + * @param {int} size - number of characters wanted in each chunk |
| 45 | + * @return {array} - array of original string split into chunks |
| 46 | + * |
| 47 | + * @example |
| 48 | + * chunkify("this is a test", 2); // ["th", "is", " i", "s ", "a ", "te", "st"] |
| 49 | + */ |
| 50 | +function chunkify(str, size) { |
| 51 | + let chunks = []; |
| 52 | + for (let i = 0; i < str.length; i += size) { |
| 53 | + chunks.push(str.slice(i, i + size)); |
| 54 | + } |
| 55 | + return chunks; |
| 56 | +} |
| 57 | + |
| 58 | +/** |
| 59 | + * Rotates string represention of bits to th left |
| 60 | + * |
| 61 | + * @param {string} bits - string representation of bits |
| 62 | + * @param {int} turns - number of rotations to make |
| 63 | + * @return {string} - string representation of bits after rotation |
| 64 | + * |
| 65 | + * @example |
| 66 | + * rotateLeft("1011", 3); // "1101" |
| 67 | + */ |
| 68 | +function rotateRight(bits, turns) { |
| 69 | + return bits.substr(bits.length - turns) + bits.substr(0, bits.length - turns); |
| 70 | +} |
| 71 | + |
| 72 | +/** |
| 73 | + * Pre-processes message to feed the algorithm loop |
| 74 | + * |
| 75 | + * @param {string} message - message to pre-process |
| 76 | + * @return {string} - processed message |
| 77 | + */ |
| 78 | +function preProcess(message) { |
| 79 | + //covert message to binary representation padded to |
| 80 | + //8 bits, and add 1 |
| 81 | + let m = message.split("") |
| 82 | + .map(e => e.charCodeAt(0)) |
| 83 | + .map(e => e.toString(2)) |
| 84 | + .map(e => pad(e, 8)) |
| 85 | + .join("") + "1"; |
| 86 | + |
| 87 | + //extend message by adding empty bits (0) |
| 88 | + while (m.length % 512 !== 448) { |
| 89 | + m += "0"; |
| 90 | + } |
| 91 | + |
| 92 | + //length of message in binary, padded, and extended |
| 93 | + //to a 64 bit representation |
| 94 | + let ml = (message.length * CHAR_SIZE).toString(2); |
| 95 | + ml = pad(ml, 8); |
| 96 | + ml = "0".repeat(64 - ml.length) + ml; |
| 97 | + |
| 98 | + return m + ml; |
| 99 | +} |
| 100 | + |
| 101 | +/** |
| 102 | + * Hashes message using SHA-256 Cryptographic Hash Function |
| 103 | + * |
| 104 | + * @param {string} message - message to hash |
| 105 | + * @return {string} - message digest (hash value) |
| 106 | + */ |
| 107 | +function SHA256(message) { |
| 108 | + //initial hash variables |
| 109 | + let H0 = 0x6a09e667; |
| 110 | + let H1 = 0xbb67ae85; |
| 111 | + let H2 = 0x3c6ef372; |
| 112 | + let H3 = 0xa54ff53a; |
| 113 | + let H4 = 0x510e527f; |
| 114 | + let H5 = 0x9b05688c; |
| 115 | + let H6 = 0x1f83d9ab; |
| 116 | + let H7 = 0x5be0cd19; |
| 117 | + |
| 118 | + //pre-process message and split into 512 bit chunks |
| 119 | + let bits = preProcess(message); |
| 120 | + let chunks = chunkify(bits, 512); |
| 121 | + |
| 122 | + chunks.forEach(function(chunk, i) { |
| 123 | + //break each chunk into 16 32-bit words |
| 124 | + let words = chunkify(chunk, 32); |
| 125 | + |
| 126 | + //extend 16 32-bit words to 80 32-bit words |
| 127 | + for (let i = 16; i < 64; i++) { |
| 128 | + const W1 = words[i - 15]; |
| 129 | + const W2 = words[i - 2]; |
| 130 | + const R1 = rotateRight(W1, 7); |
| 131 | + const R2 = rotateRight(W1, 18); |
| 132 | + const R3 = rotateRight(W2, 17); |
| 133 | + const R4 = rotateRight(W2, 19); |
| 134 | + const S0 = parseInt(R1, 2) ^ parseInt(R2, 2) ^ (parseInt(W1, 2) >>> 3); |
| 135 | + const S1 = parseInt(R3, 2) ^ parseInt(R4, 2) ^ (parseInt(W2, 2) >>> 10); |
| 136 | + const val = parseInt(words[i - 16], 2) + S0 + parseInt(words[i - 7], 2) + S1; |
| 137 | + words[i] = pad((val >>> 0).toString(2), 32); |
| 138 | + } |
| 139 | + |
| 140 | + //initialize variables for this chunk |
| 141 | + let [a, b, c, d, e, f, g, h] = [H0, H1, H2, H3, H4, H5, H6, H7]; |
| 142 | + |
| 143 | + for (let i = 0; i < 64; i++) { |
| 144 | + const S1 = [6, 11, 25] |
| 145 | + .map(turns => rotateRight(pad(e.toString(2), 32), turns)) |
| 146 | + .map(bitstring => parseInt(bitstring, 2)) |
| 147 | + .reduce((acc, curr) => acc ^ curr, 0) >>> 0; |
| 148 | + const CH = ((e & f) ^ (~e & g)) >>> 0; |
| 149 | + const temp1 = (h + S1 + CH + K[i] + parseInt(words[i], 2)) >>> 0; |
| 150 | + const S0 = [2, 13, 22] |
| 151 | + .map(turns => rotateRight(pad(a.toString(2), 32), turns)) |
| 152 | + .map(bitstring => parseInt(bitstring, 2)) |
| 153 | + .reduce((acc, curr) => acc ^ curr, 0) >>> 0; |
| 154 | + const maj = ((a & b) ^ (a & c) ^ (b & c)) >>> 0; |
| 155 | + const temp2 = (S0 + maj) >>> 0; |
| 156 | + |
| 157 | + h = g; |
| 158 | + g = f; |
| 159 | + f = e; |
| 160 | + e = (d + temp1) >>> 0; |
| 161 | + d = c; |
| 162 | + c = b; |
| 163 | + b = a; |
| 164 | + a = (temp1 + temp2) >>> 0; |
| 165 | + } |
| 166 | + |
| 167 | + //add values for this chunk to main hash variables (unsigned) |
| 168 | + H0 = (H0 + a) >>> 0; |
| 169 | + H1 = (H1 + b) >>> 0; |
| 170 | + H2 = (H2 + c) >>> 0; |
| 171 | + H3 = (H3 + d) >>> 0; |
| 172 | + H4 = (H4 + e) >>> 0; |
| 173 | + H5 = (H5 + f) >>> 0; |
| 174 | + H6 = (H6 + g) >>> 0; |
| 175 | + H7 = (H7 + h) >>> 0; |
| 176 | + }); |
| 177 | + |
| 178 | + //combine hash values of main hash variables and return |
| 179 | + let HH = [H0, H1, H2, H3, H4, H5, H6, H7] |
| 180 | + .map(e => e.toString(16)) |
| 181 | + .map(e => pad(e, 8)) |
| 182 | + .join(""); |
| 183 | + |
| 184 | + return HH; |
| 185 | +} |
| 186 | + |
| 187 | +//export SHA256 function |
| 188 | +module.exports = SHA256; |
0 commit comments