js-sha512/src/sha512.js

/*
 * js-sha512 v0.2.0
 * https://github.com/emn178/js-sha512
 *
 * Copyright 2014-2015, emn178@gmail.com
 *
 * Licensed under the MIT license:
 * http://www.opensource.org/licenses/MIT
 */
;(function(root, undefined) {
  'use strict';

  var NODE_JS = typeof(module) != 'undefined';
  if(NODE_JS) {
    root = global;
  }
  var HEX_CHARS = '0123456789abcdef'.split('');
  var SHIFT = [24, 16, 8, 0];

  var K =[0x428A2F98, 0xD728AE22, 0x71374491, 0x23EF65CD,
          0xB5C0FBCF, 0xEC4D3B2F, 0xE9B5DBA5, 0x8189DBBC,
          0x3956C25B, 0xF348B538, 0x59F111F1, 0xB605D019,
          0x923F82A4, 0xAF194F9B, 0xAB1C5ED5, 0xDA6D8118,
          0xD807AA98, 0xA3030242, 0x12835B01, 0x45706FBE,
          0x243185BE, 0x4EE4B28C, 0x550C7DC3, 0xD5FFB4E2,
          0x72BE5D74, 0xF27B896F, 0x80DEB1FE, 0x3B1696B1,
          0x9BDC06A7, 0x25C71235, 0xC19BF174, 0xCF692694,
          0xE49B69C1, 0x9EF14AD2, 0xEFBE4786, 0x384F25E3,
          0x0FC19DC6, 0x8B8CD5B5, 0x240CA1CC, 0x77AC9C65,
          0x2DE92C6F, 0x592B0275, 0x4A7484AA, 0x6EA6E483,
          0x5CB0A9DC, 0xBD41FBD4, 0x76F988DA, 0x831153B5,
          0x983E5152, 0xEE66DFAB, 0xA831C66D, 0x2DB43210,
          0xB00327C8, 0x98FB213F, 0xBF597FC7, 0xBEEF0EE4,
          0xC6E00BF3, 0x3DA88FC2, 0xD5A79147, 0x930AA725,
          0x06CA6351, 0xE003826F, 0x14292967, 0x0A0E6E70,
          0x27B70A85, 0x46D22FFC, 0x2E1B2138, 0x5C26C926,
          0x4D2C6DFC, 0x5AC42AED, 0x53380D13, 0x9D95B3DF,
          0x650A7354, 0x8BAF63DE, 0x766A0ABB, 0x3C77B2A8,
          0x81C2C92E, 0x47EDAEE6, 0x92722C85, 0x1482353B,
          0xA2BFE8A1, 0x4CF10364, 0xA81A664B, 0xBC423001,
          0xC24B8B70, 0xD0F89791, 0xC76C51A3, 0x0654BE30,
          0xD192E819, 0xD6EF5218, 0xD6990624, 0x5565A910,
          0xF40E3585, 0x5771202A, 0x106AA070, 0x32BBD1B8,
          0x19A4C116, 0xB8D2D0C8, 0x1E376C08, 0x5141AB53,
          0x2748774C, 0xDF8EEB99, 0x34B0BCB5, 0xE19B48A8,
          0x391C0CB3, 0xC5C95A63, 0x4ED8AA4A, 0xE3418ACB,
          0x5B9CCA4F, 0x7763E373, 0x682E6FF3, 0xD6B2B8A3,
          0x748F82EE, 0x5DEFB2FC, 0x78A5636F, 0x43172F60,
          0x84C87814, 0xA1F0AB72, 0x8CC70208, 0x1A6439EC,
          0x90BEFFFA, 0x23631E28, 0xA4506CEB, 0xDE82BDE9,
          0xBEF9A3F7, 0xB2C67915, 0xC67178F2, 0xE372532B,
          0xCA273ECE, 0xEA26619C, 0xD186B8C7, 0x21C0C207,
          0xEADA7DD6, 0xCDE0EB1E, 0xF57D4F7F, 0xEE6ED178,
          0x06F067AA, 0x72176FBA, 0x0A637DC5, 0xA2C898A6,
          0x113F9804, 0xBEF90DAE, 0x1B710B35, 0x131C471B,
          0x28DB77F5, 0x23047D84, 0x32CAAB7B, 0x40C72493,
          0x3C9EBE0A, 0x15C9BEBC, 0x431D67C4, 0x9C100D4C,
          0x4CC5D4BE, 0xCB3E42B6, 0x597F299C, 0xFC657E2A,
          0x5FCB6FAB, 0x3AD6FAEC, 0x6C44198C, 0x4A475817];

  var sha512 = function(message, asciiOnly) {
    return sha2(message, 512, asciiOnly);
  };

  var sha384 = function(message, asciiOnly) {
    return sha2(message, 384, asciiOnly);
  };

  var sha512_256 = function(message, asciiOnly) {
    return sha2(message, 256, asciiOnly);
  };

  var sha512_224 = function(message, asciiOnly) {
    return sha2(message, 224, asciiOnly);
  };

  var sha2 = function(message, tbit, asciiOnly) {
    var blocks, h0h, h0l, h1h, h1l, h2h, h2l, h3h, h3l, 
        h4h, h4l, h5h, h5l, h6h, h6l, h7h, h7l;
    if(!asciiOnly && /[^\x00-\x7F]/.test(message)) {
      blocks = getBlocksFromUtf8(message);
    } else {
      blocks = getBlocksFromAscii(message);
    }

    if(tbit == 512) {
      h0h = 0x6A09E667;
      h0l = 0xF3BCC908;
      h1h = 0xBB67AE85;
      h1l = 0x84CAA73B;
      h2h = 0x3C6EF372;
      h2l = 0xFE94F82B;
      h3h = 0xA54FF53A;
      h3l = 0x5F1D36F1;
      h4h = 0x510E527F;
      h4l = 0xADE682D1;
      h5h = 0x9B05688C;
      h5l = 0x2B3E6C1F;
      h6h = 0x1F83D9AB;
      h6l = 0xFB41BD6B;
      h7h = 0x5BE0CD19;
      h7l = 0x137E2179;
    } else if(tbit == 384) {
      h0h = 0xCBBB9D5D;
      h0l = 0xC1059ED8;
      h1h = 0x629A292A;
      h1l = 0x367CD507;
      h2h = 0x9159015A;
      h2l = 0x3070DD17;
      h3h = 0x152FECD8;
      h3l = 0xF70E5939;
      h4h = 0x67332667;
      h4l = 0xFFC00B31;
      h5h = 0x8EB44A87;
      h5l = 0x68581511;
      h6h = 0xDB0C2E0D;
      h6l = 0x64F98FA7;
      h7h = 0x47B5481D;
      h7l = 0xBEFA4FA4;
    } else if(tbit == 256) {
      h0h = 0x22312194;
      h0l = 0xFC2BF72C;
      h1h = 0x9F555FA3;
      h1l = 0xC84C64C2;
      h2h = 0x2393B86B;
      h2l = 0x6F53B151;
      h3h = 0x96387719;
      h3l = 0x5940EABD;
      h4h = 0x96283EE2;
      h4l = 0xA88EFFE3;
      h5h = 0xBE5E1E25;
      h5l = 0x53863992;
      h6h = 0x2B0199FC;
      h6l = 0x2C85B8AA;
      h7h = 0x0EB72DDC;
      h7l = 0x81C52CA2;
    } else if(tbit == 224) {
      h0h = 0x8C3D37C8;
      h0l = 0x19544DA2;
      h1h = 0x73E19966;
      h1l = 0x89DCD4D6;
      h2h = 0x1DFAB7AE;
      h2l = 0x32FF9C82;
      h3h = 0x679DD514;
      h3l = 0x582F9FCF;
      h4h = 0x0F6D2B69;
      h4l = 0x7BD44DA8;
      h5h = 0x77E36F73;
      h5l = 0x04C48942;
      h6h = 0x3F9D85A8;
      h6l = 0x6A1D36C8;
      h7h = 0x1112E6AD;
      h7l = 0x91D692A1;
    }

    for(var i = 0, length = blocks.length;i < length;i += 32) {
      var w = [], s0h, s0l, s1h, s1l, th, tl, c1, c2, c3, c4, j, 
          ah, al, bh, bl, ch, cl, dh, dl, eh, el, fh, fl, gh, gl, hh, hl,
          majh, majl, t1h, t1l, t2h, t2l, chh, chl;
      for(j = 0;j < 32;++j) {
        w[j] = blocks[i + j];
      }
      for(j = 32;j < 160;j += 2) {
        th = w[j - 30];
        tl = w[j - 29];
        s0h = ((th >>> 1) | (tl << 31)) ^ ((th >>> 8) | (tl << 24)) ^ (th >>> 7);
        s0l = ((tl >>> 1) | (th << 31)) ^ ((tl >>> 8) | (th << 24)) ^ ((tl >>> 7) | th << 25);

        th = w[j - 4];
        tl = w[j - 3];
        s1h = ((th >>> 19) | (tl << 13)) ^ ((tl >>> 29) | (th << 3)) ^ (th >>> 6);
        s1l = ((tl >>> 19) | (th << 13)) ^ ((th >>> 29) | (tl << 3)) ^ ((tl >>> 6) | th << 26);

        th = w[j - 32];
        tl = w[j - 31];

        c1 = (tl & 0xFFFF) + (s0l & 0xFFFF) + (s1l & 0xFFFF);
        c2 = (tl >>> 16) + (s0l >>> 16) + (s1l >>> 16);
        c3 = (th & 0xFFFF) + (s0h & 0xFFFF) + (s1h & 0xFFFF);
        c4 = (th >>> 16) + (s0h >>> 16) + (s1h >>> 16);

        th = w[j - 14];
        tl = w[j - 13];

        c1 += (tl & 0xFFFF);
        c2 += (tl >>> 16) + (c1 >>> 16);
        c3 += (th & 0xFFFF) + (c2 >>> 16);
        c4 += (th >>> 16) + (c3 >>> 16);

        w[j] = (c4 << 16) | (c3 & 0xFFFF);
        w[j + 1] = (c2 << 16) | (c1 & 0xFFFF);
      }

      ah = h0h;
      al = h0l;
      bh = h1h;
      bl = h1l;
      ch = h2h;
      cl = h2l;
      dh = h3h;
      dl = h3l;
      eh = h4h;
      el = h4l;
      fh = h5h;
      fl = h5l;
      gh = h6h;
      gl = h6l;
      hh = h7h;
      hl = h7l;
      for(j = 0;j < 160;j += 2) {
        s0h = ((ah >>> 28) | (al << 4)) ^ ((al >>> 2) | (ah << 30)) ^ ((al >>> 7) | (ah << 25));
        s0l = ((al >>> 28) | (ah << 4)) ^ ((ah >>> 2) | (al << 30)) ^ ((ah >>> 7) | (al << 25));

        s1h = ((eh >>> 14) | (el << 18)) ^ ((eh >>> 18) | (el << 14)) ^ ((el >>> 9) | (eh << 23));
        s1l = ((el >>> 14) | (eh << 18)) ^ ((el >>> 18) | (eh << 14)) ^ ((eh >>> 9) | (el << 23));

        majh = (ah & bh) ^ (ah & ch) ^ (bh & ch);
        majl = (al & bl) ^ (al & cl) ^ (bl & cl);

        c1 = (majl & 0xFFFF) + (s0l & 0xFFFF);
        c2 = (majl >>> 16) + (s0l >>> 16) + (c1 >>> 16);
        c3 = (majh & 0xFFFF) + (s0h & 0xFFFF) + (c2 >>> 16);
        c4 = (majh >>> 16) + (s0h >>> 16) + (c3 >>> 16);

        t2h = (c4 << 16) | (c3 & 0xFFFF);
        t2l = (c2 << 16) | (c1 & 0xFFFF);

        chh = (eh & fh) ^ (~eh & gh);
        chl = (el & fl) ^ (~el & gl);

        th = w[j];
        tl = w[j + 1];

        c1 = (tl & 0xFFFF) + (chl & 0xFFFF) + (s1l & 0xFFFF) + (hl & 0xFFFF);
        c2 = (tl >>> 16) + (chl >>> 16) + (s1l >>> 16) + (hl >>> 16);
        c3 = (th & 0xFFFF) + (chh & 0xFFFF) + (s1h & 0xFFFF) + (hh & 0xFFFF);
        c4 = (th >>> 16) + (chh >>> 16) + (s1h >>> 16) + (hh >>> 16);

        th = K[j];
        tl = K[j + 1];

        c1 += (tl & 0xFFFF);
        c2 += (tl >>> 16) + (c1 >>> 16);
        c3 += (th & 0xFFFF) + (c2 >>> 16);
        c4 += (th >>> 16) + (c3 >>> 16);

        t1h = (c4 << 16) | (c3 & 0xFFFF);
        t1l = (c2 << 16) | (c1 & 0xFFFF);

        hh = gh;
        hl = gl;
        gh = fh;
        gl = fl;
        fh = eh;
        fl = el;

        c1 = (dl & 0xFFFF) + (t1l & 0xFFFF);
        c2 = (dl >>> 16) + (t1l >>> 16) + (c1 >>> 16);
        c3 = (dh & 0xFFFF) + (t1h & 0xFFFF) + (c2 >>> 16);
        c4 = (dh >>> 16) + (t1h >>> 16) + (c3 >>> 16);

        eh = (c4 << 16) | (c3 & 0xFFFF);
        el = (c2 << 16) | (c1 & 0xFFFF);

        dh = ch;
        dl = cl;
        ch = bh;
        cl = bl;
        bh = ah;
        bl = al;

        c1 = (t2l & 0xFFFF) + (t1l & 0xFFFF);
        c2 = (t2l >>> 16) + (t1l >>> 16) + (c1 >>> 16);
        c3 = (t2h & 0xFFFF) + (t1h & 0xFFFF) + (c2 >>> 16);
        c4 = (t2h >>> 16) + (t1h >>> 16) + (c3 >>> 16);

        ah = (c4 << 16) | (c3 & 0xFFFF);
        al = (c2 << 16) | (c1 & 0xFFFF);
      }

      c1 = (h0l & 0xFFFF) + (al & 0xFFFF);
      c2 = (h0l >>> 16) + (al >>> 16) + (c1 >>> 16);
      c3 = (h0h & 0xFFFF) + (ah & 0xFFFF) + (c2 >>> 16);
      c4 = (h0h >>> 16) + (ah >>> 16) + (c3 >>> 16);

      h0h = (c4 << 16) | (c3 & 0xFFFF);
      h0l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h1l & 0xFFFF) + (bl & 0xFFFF);
      c2 = (h1l >>> 16) + (bl >>> 16) + (c1 >>> 16);
      c3 = (h1h & 0xFFFF) + (bh & 0xFFFF) + (c2 >>> 16);
      c4 = (h1h >>> 16) + (bh >>> 16) + (c3 >>> 16);

      h1h = (c4 << 16) | (c3 & 0xFFFF);
      h1l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h2l & 0xFFFF) + (cl & 0xFFFF);
      c2 = (h2l >>> 16) + (cl >>> 16) + (c1 >>> 16);
      c3 = (h2h & 0xFFFF) + (ch & 0xFFFF) + (c2 >>> 16);
      c4 = (h2h >>> 16) + (ch >>> 16) + (c3 >>> 16);

      h2h = (c4 << 16) | (c3 & 0xFFFF);
      h2l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h3l & 0xFFFF) + (dl & 0xFFFF);
      c2 = (h3l >>> 16) + (dl >>> 16) + (c1 >>> 16);
      c3 = (h3h & 0xFFFF) + (dh & 0xFFFF) + (c2 >>> 16);
      c4 = (h3h >>> 16) + (dh >>> 16) + (c3 >>> 16);

      h3h = (c4 << 16) | (c3 & 0xFFFF);
      h3l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h4l & 0xFFFF) + (el & 0xFFFF);
      c2 = (h4l >>> 16) + (el >>> 16) + (c1 >>> 16);
      c3 = (h4h & 0xFFFF) + (eh & 0xFFFF) + (c2 >>> 16);
      c4 = (h4h >>> 16) + (eh >>> 16) + (c3 >>> 16);

      h4h = (c4 << 16) | (c3 & 0xFFFF);
      h4l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h5l & 0xFFFF) + (fl & 0xFFFF);
      c2 = (h5l >>> 16) + (fl >>> 16) + (c1 >>> 16);
      c3 = (h5h & 0xFFFF) + (fh & 0xFFFF) + (c2 >>> 16);
      c4 = (h5h >>> 16) + (fh >>> 16) + (c3 >>> 16);

      h5h = (c4 << 16) | (c3 & 0xFFFF);
      h5l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h6l & 0xFFFF) + (gl & 0xFFFF);
      c2 = (h6l >>> 16) + (gl >>> 16) + (c1 >>> 16);
      c3 = (h6h & 0xFFFF) + (gh & 0xFFFF) + (c2 >>> 16);
      c4 = (h6h >>> 16) + (gh >>> 16) + (c3 >>> 16);

      h6h = (c4 << 16) | (c3 & 0xFFFF);
      h6l = (c2 << 16) | (c1 & 0xFFFF);

      c1 = (h7l & 0xFFFF) + (hl & 0xFFFF);
      c2 = (h7l >>> 16) + (hl >>> 16) + (c1 >>> 16);
      c3 = (h7h & 0xFFFF) + (hh & 0xFFFF) + (c2 >>> 16);
      c4 = (h7h >>> 16) + (hh >>> 16) + (c3 >>> 16);

      h7h = (c4 << 16) | (c3 & 0xFFFF);
      h7l = (c2 << 16) | (c1 & 0xFFFF);
    }

    var hex = toHexString(h0h) + toHexString(h0l) + toHexString(h1h) + toHexString(h1l) +
              toHexString(h2h) + toHexString(h2l) + toHexString(h3h) + toHexString(h3l);
    if(tbit == 224) {
      return hex.substr(0, hex.length - 8);
    }
    if(tbit >= 384) {
      hex += toHexString(h4h) + toHexString(h4l) + toHexString(h5h) + toHexString(h5l);
    }
    if(tbit == 512) {
      hex += toHexString(h6h) + toHexString(h6l) + toHexString(h7h) + toHexString(h7l);
    }
    return hex;
  };

  var toHexString = function(v) {
    return HEX_CHARS[(v >> 28) & 0x0F] + HEX_CHARS[(v >> 24) & 0x0F] +
           HEX_CHARS[(v >> 20) & 0x0F] + HEX_CHARS[(v >> 16) & 0x0F] +
           HEX_CHARS[(v >> 12) & 0x0F] + HEX_CHARS[(v >> 8) & 0x0F] +
           HEX_CHARS[(v >> 4) & 0x0F] + HEX_CHARS[v & 0x0F];
  };

  var getBytesFromUtf8 = function(str) {
    var bytes = [], index = 0;
    for (var i = 0;i < str.length; i++) {
      var c = str.charCodeAt(i);
      if (c < 0x80) {
        bytes[index++] = c;
      } else if (c < 0x800) {
        bytes[index++] = 0xc0 | (c >> 6);
        bytes[index++] = 0x80 | (c & 0x3f);
      } else if (c < 0xd800 || c >= 0xe000) {
        bytes[index++] = 0xe0 | (c >> 12);
        bytes[index++] = 0x80 | ((c >> 6) & 0x3f);
        bytes[index++] = 0x80 | (c & 0x3f);
      } else {
        c = 0x10000 + (((c & 0x3ff) << 10) | (str.charCodeAt(++i) & 0x3ff));
        bytes[index++] = 0xf0 | (c >> 18);
        bytes[index++] = 0x80 | ((c >> 12) & 0x3f);
        bytes[index++] = 0x80 | ((c >> 6) & 0x3f);
        bytes[index++] = 0x80 | (c & 0x3f);
      }
    }
    return bytes;
  };

  var getBlocksFromAscii = function(message) {
    // a block is 32 bits(4 bytes), a chunk is 1024 bits(128 bytes)
    var length = message.length;
    var chunkCount = ((length + 16) >> 7) + 1;
    var blockCount = chunkCount << 5; // chunkCount * 32
    var blocks = [], i;
    for(i = 0;i < blockCount;++i) {
      blocks[i] = 0;
    }
    for(i = 0;i < length;++i) {
      blocks[i >> 2] |= message.charCodeAt(i) << SHIFT[i & 3];
    }
    blocks[i >> 2] |= 0x80 << SHIFT[i & 3];
    blocks[blockCount - 1] = length << 3; // length * 8
    return blocks;
  };
  
  var getBlocksFromUtf8 = function(message) {
    var bytes = getBytesFromUtf8(message);
    var length = bytes.length;
    var chunkCount = ((length + 16) >> 7) + 1;
    var blockCount = chunkCount << 5; // chunkCount * 32
    var blocks = [], i;
    for(i = 0;i < blockCount;++i) {
      blocks[i] = 0;
    }
    for(i = 0;i < length;++i) {
      blocks[i >> 2] |= bytes[i] << SHIFT[i & 3];
    }
    blocks[i >> 2] |= 0x80 << SHIFT[i & 3];
    blocks[blockCount - 1] = length << 3; // length * 8
    return blocks;
  };

  if(!root.JS_SHA512_TEST && NODE_JS) {
    sha512.sha512 = sha512;
    sha512.sha384 = sha384;
    sha512.sha512_256 = sha512_256;
    sha512.sha512_224 = sha512_224;
    module.exports = sha512;
  } else if(root) {
    root.sha512 = sha512;
    root.sha384 = sha384;
    root.sha512_256 = sha512_256;
    root.sha512_224 = sha512_224;
  }
}(this));