OLD | NEW |
| (Empty) |
1 // Copyright (c) 2012, the Dart project authors. Please see the AUTHORS file | |
2 // for details. All rights reserved. Use of this source code is governed by a | |
3 // BSD-style license that can be found in the LICENSE file. | |
4 | |
5 /// Hash routines copied from private helpers in dart:io. | |
6 library hashes; | |
7 | |
8 // Constants. | |
9 const _MASK_8 = 0xff; | |
10 const _MASK_32 = 0xffffffff; | |
11 const _BITS_PER_BYTE = 8; | |
12 const _BYTES_PER_WORD = 4; | |
13 const _pow2_32 = 0x100000000; | |
14 | |
15 // Base class encapsulating common behavior for cryptographic hash | |
16 // functions. | |
17 abstract class _HashBase { | |
18 // Hasher state. | |
19 final int _chunkSizeInWords; | |
20 final int _digestSizeInWords; | |
21 final bool _bigEndianWords; | |
22 int _lengthInBytes = 0; | |
23 List<int> _pendingData; | |
24 List<int> _currentChunk; | |
25 List<int> _h; | |
26 bool _digestCalled = false; | |
27 | |
28 _HashBase( | |
29 this._chunkSizeInWords, this._digestSizeInWords, this._bigEndianWords) | |
30 : _pendingData = [] { | |
31 _currentChunk = new List(_chunkSizeInWords); | |
32 _h = new List(_digestSizeInWords); | |
33 } | |
34 | |
35 // Update the hasher with more data. | |
36 add(List<int> data) { | |
37 if (_digestCalled) { | |
38 throw new StateError( | |
39 'Hash update method called after digest was retrieved'); | |
40 } | |
41 _lengthInBytes += data.length; | |
42 _pendingData.addAll(data); | |
43 _iterate(); | |
44 } | |
45 | |
46 // Finish the hash computation and return the digest string. | |
47 List<int> close() { | |
48 if (_digestCalled) { | |
49 return _resultAsBytes(); | |
50 } | |
51 _digestCalled = true; | |
52 _finalizeData(); | |
53 _iterate(); | |
54 assert(_pendingData.length == 0); | |
55 return _resultAsBytes(); | |
56 } | |
57 | |
58 // Returns the block size of the hash in bytes. | |
59 int get blockSize { | |
60 return _chunkSizeInWords * _BYTES_PER_WORD; | |
61 } | |
62 | |
63 // Create a fresh instance of this Hash. | |
64 newInstance(); | |
65 | |
66 // One round of the hash computation. | |
67 _updateHash(List<int> m); | |
68 | |
69 // Helper methods. | |
70 _add32(x, y) => (x + y) & _MASK_32; | |
71 _roundUp(val, n) => (val + n - 1) & -n; | |
72 | |
73 // Rotate left limiting to unsigned 32-bit values. | |
74 int _rotl32(int val, int shift) { | |
75 var mod_shift = shift & 31; | |
76 return ((val << mod_shift) & _MASK_32) | | |
77 ((val & _MASK_32) >> (32 - mod_shift)); | |
78 } | |
79 | |
80 // Compute the final result as a list of bytes from the hash words. | |
81 List<int> _resultAsBytes() { | |
82 var result = <int>[]; | |
83 for (var i = 0; i < _h.length; i++) { | |
84 result.addAll(_wordToBytes(_h[i])); | |
85 } | |
86 return result; | |
87 } | |
88 | |
89 // Converts a list of bytes to a chunk of 32-bit words. | |
90 _bytesToChunk(List<int> data, int dataIndex) { | |
91 assert((data.length - dataIndex) >= (_chunkSizeInWords * _BYTES_PER_WORD)); | |
92 | |
93 for (var wordIndex = 0; wordIndex < _chunkSizeInWords; wordIndex++) { | |
94 var w3 = _bigEndianWords ? data[dataIndex] : data[dataIndex + 3]; | |
95 var w2 = _bigEndianWords ? data[dataIndex + 1] : data[dataIndex + 2]; | |
96 var w1 = _bigEndianWords ? data[dataIndex + 2] : data[dataIndex + 1]; | |
97 var w0 = _bigEndianWords ? data[dataIndex + 3] : data[dataIndex]; | |
98 dataIndex += 4; | |
99 var word = (w3 & 0xff) << 24; | |
100 word |= (w2 & _MASK_8) << 16; | |
101 word |= (w1 & _MASK_8) << 8; | |
102 word |= (w0 & _MASK_8); | |
103 _currentChunk[wordIndex] = word; | |
104 } | |
105 } | |
106 | |
107 // Convert a 32-bit word to four bytes. | |
108 List<int> _wordToBytes(int word) { | |
109 List<int> bytes = new List(_BYTES_PER_WORD); | |
110 bytes[0] = (word >> (_bigEndianWords ? 24 : 0)) & _MASK_8; | |
111 bytes[1] = (word >> (_bigEndianWords ? 16 : 8)) & _MASK_8; | |
112 bytes[2] = (word >> (_bigEndianWords ? 8 : 16)) & _MASK_8; | |
113 bytes[3] = (word >> (_bigEndianWords ? 0 : 24)) & _MASK_8; | |
114 return bytes; | |
115 } | |
116 | |
117 // Iterate through data updating the hash computation for each | |
118 // chunk. | |
119 _iterate() { | |
120 var len = _pendingData.length; | |
121 var chunkSizeInBytes = _chunkSizeInWords * _BYTES_PER_WORD; | |
122 if (len >= chunkSizeInBytes) { | |
123 var index = 0; | |
124 for (; (len - index) >= chunkSizeInBytes; index += chunkSizeInBytes) { | |
125 _bytesToChunk(_pendingData, index); | |
126 _updateHash(_currentChunk); | |
127 } | |
128 _pendingData = _pendingData.sublist(index, len); | |
129 } | |
130 } | |
131 | |
132 // Finalize the data. Add a 1 bit to the end of the message. Expand with | |
133 // 0 bits and add the length of the message. | |
134 _finalizeData() { | |
135 _pendingData.add(0x80); | |
136 var contentsLength = _lengthInBytes + 9; | |
137 var chunkSizeInBytes = _chunkSizeInWords * _BYTES_PER_WORD; | |
138 var finalizedLength = _roundUp(contentsLength, chunkSizeInBytes); | |
139 var zeroPadding = finalizedLength - contentsLength; | |
140 for (var i = 0; i < zeroPadding; i++) { | |
141 _pendingData.add(0); | |
142 } | |
143 var lengthInBits = _lengthInBytes * _BITS_PER_BYTE; | |
144 assert(lengthInBits < _pow2_32); | |
145 if (_bigEndianWords) { | |
146 _pendingData.addAll(_wordToBytes(0)); | |
147 _pendingData.addAll(_wordToBytes(lengthInBits & _MASK_32)); | |
148 } else { | |
149 _pendingData.addAll(_wordToBytes(lengthInBits & _MASK_32)); | |
150 _pendingData.addAll(_wordToBytes(0)); | |
151 } | |
152 } | |
153 } | |
154 | |
155 // The SHA1 hasher is used to compute an SHA1 message digest. | |
156 class SHA1 extends _HashBase { | |
157 // Construct a SHA1 hasher object. | |
158 SHA1() | |
159 : _w = new List(80), | |
160 super(16, 5, true) { | |
161 _h[0] = 0x67452301; | |
162 _h[1] = 0xEFCDAB89; | |
163 _h[2] = 0x98BADCFE; | |
164 _h[3] = 0x10325476; | |
165 _h[4] = 0xC3D2E1F0; | |
166 } | |
167 | |
168 // Returns a new instance of this Hash. | |
169 SHA1 newInstance() { | |
170 return new SHA1(); | |
171 } | |
172 | |
173 // Compute one iteration of the SHA1 algorithm with a chunk of | |
174 // 16 32-bit pieces. | |
175 void _updateHash(List<int> m) { | |
176 assert(m.length == 16); | |
177 | |
178 var a = _h[0]; | |
179 var b = _h[1]; | |
180 var c = _h[2]; | |
181 var d = _h[3]; | |
182 var e = _h[4]; | |
183 | |
184 for (var i = 0; i < 80; i++) { | |
185 if (i < 16) { | |
186 _w[i] = m[i]; | |
187 } else { | |
188 var n = _w[i - 3] ^ _w[i - 8] ^ _w[i - 14] ^ _w[i - 16]; | |
189 _w[i] = _rotl32(n, 1); | |
190 } | |
191 var t = _add32(_add32(_rotl32(a, 5), e), _w[i]); | |
192 if (i < 20) { | |
193 t = _add32(_add32(t, (b & c) | (~b & d)), 0x5A827999); | |
194 } else if (i < 40) { | |
195 t = _add32(_add32(t, (b ^ c ^ d)), 0x6ED9EBA1); | |
196 } else if (i < 60) { | |
197 t = _add32(_add32(t, (b & c) | (b & d) | (c & d)), 0x8F1BBCDC); | |
198 } else { | |
199 t = _add32(_add32(t, b ^ c ^ d), 0xCA62C1D6); | |
200 } | |
201 | |
202 e = d; | |
203 d = c; | |
204 c = _rotl32(b, 30); | |
205 b = a; | |
206 a = t & _MASK_32; | |
207 } | |
208 | |
209 _h[0] = _add32(a, _h[0]); | |
210 _h[1] = _add32(b, _h[1]); | |
211 _h[2] = _add32(c, _h[2]); | |
212 _h[3] = _add32(d, _h[3]); | |
213 _h[4] = _add32(e, _h[4]); | |
214 } | |
215 | |
216 List<int> _w; | |
217 } | |
OLD | NEW |