unixpass
Version:
Native implementation of Unix compatible DES/MD5/SHA256/SHA512 password hashing.
206 lines (202 loc) • 4.82 kB
JavaScript
;
const crypto = require('crypto');
const pb64 = require('./pb64.js');
const hashCrypt = function(password, salt, alg, rounds, roundsExplicit) {
var hn, hl, i, a, b, c, ar, br, cr, p, s, h, rv;
switch (alg) {
case 1:
hn = 'md5';
hl = 16;
if (salt.length > 8) {
salt = salt.slice(0, 8);
}
break;
case 5:
hn = 'sha256';
hl = 32;
if (salt.length > 16) {
salt = salt.slice(0, 16);
}
break;
case 6:
hn = 'sha512';
hl = 64;
if (salt.length > 16) {
salt = salt.slice(0, 16);
}
break;
}
try {
a = crypto.createHash(hn);
b = crypto.createHash(hn);
} catch (e) {
a = undefined;
}
if (a === undefined) {
return false;
}
a.update(password);
if (alg == 1) {
a.update('$1$');
}
a.update(salt);
b.update(password);
b.update(salt);
b.update(password);
br = b.digest();
b = undefined;
for (i = password.length; i > hl; i -= hl) {
a.update(br);
}
a.update(br.slice(0, i));
for (i = password.length; i > 0; i >>= 1) {
if (alg == 1) {
// This is obviously a bug in the original implementation,
// but we'll reproduce it in order to be compatible. There
// isn't any real security implication because of this.
if (i & 1) {
a.update("\0");
} else {
a.update((password.length > 0) ? password.substr(0, 1) : "\0");
}
} else {
if (i & 1) {
a.update(br);
} else {
a.update(password);
}
}
}
ar = a.digest();
a = undefined;
switch (alg) {
case 1:
for (i = 0; i < rounds; i++) {
a = crypto.createHash(hn);
if (i & 1) {
a.update(password);
} else {
a.update(ar);
}
if (i % 3) {
a.update(salt);
}
if (i % 7) {
a.update(password);
}
if (i & 1) {
a.update(ar);
} else {
a.update(password);
}
ar = a.digest();
a = undefined;
}
break;
case 5:
case 6:
c = crypto.createHash(hn);
for (i = password.length; i > 0; i--) {
c.update(password);
}
cr = c.digest();
c = undefined;
p = Buffer.alloc(0);
while (p.length < password.length) {
p = Buffer.concat([ p, cr ]);
}
cr = undefined;
if (p.length > password.length) {
p = p.slice(0, password.length);
}
c = crypto.createHash(hn);
for (i = 16 + ar[0]; i > 0; i--) {
c.update(salt);
}
cr = c.digest();
c = undefined;
s = Buffer.alloc(0);
while (s.length < salt.length) {
s = Buffer.concat([ s, cr ]);
}
cr = undefined;
if (s.length > salt.length) {
s = s.slice(0, salt.length);
}
for (i = 0; i < rounds; i++) {
a = crypto.createHash(hn);
if (i & 1) {
a.update(p);
} else {
a.update(ar);
}
if (i % 3) {
a.update(s);
}
if (i % 7) {
a.update(p);
}
if (i & 1) {
a.update(ar);
} else {
a.update(p);
}
ar = a.digest();
a = undefined;
}
break;
}
switch (alg) {
case 1:
// What did they smoke, when they came up with this?
h = (pb64.encb(ar[0], ar[6], ar[12], 4) +
pb64.encb(ar[1], ar[7], ar[13], 4) +
pb64.encb(ar[2], ar[8], ar[14], 4) +
pb64.encb(ar[3], ar[9], ar[15], 4) +
pb64.encb(ar[4], ar[10], ar[5], 4) +
pb64.encb(0, 0, ar[11], 2));
break;
case 5:
// What did they smoke, when they came up with this?
h = (pb64.encb(ar[0], ar[10], ar[20], 4) +
pb64.encb(ar[21], ar[1], ar[11], 4) +
pb64.encb(ar[12], ar[22], ar[2], 4) +
pb64.encb(ar[3], ar[13], ar[23], 4) +
pb64.encb(ar[24], ar[4], ar[14], 4) +
pb64.encb(ar[15], ar[25], ar[5], 4) +
pb64.encb(ar[6], ar[16], ar[26], 4) +
pb64.encb(ar[27], ar[7], ar[17], 4) +
pb64.encb(ar[18], ar[28], ar[8], 4) +
pb64.encb(ar[9], ar[19], ar[29], 4) +
pb64.encb(0, ar[31], ar[30], 3));
break;
case 6:
// What did they smoke, when they came up with this?
h = (pb64.encb(ar[0], ar[21], ar[42], 4) +
pb64.encb(ar[22], ar[43], ar[1], 4) +
pb64.encb(ar[44], ar[2], ar[23], 4) +
pb64.encb(ar[3], ar[24], ar[45], 4) +
pb64.encb(ar[25], ar[46], ar[4], 4) +
pb64.encb(ar[47], ar[5], ar[26], 4) +
pb64.encb(ar[6], ar[27], ar[48], 4) +
pb64.encb(ar[28], ar[49], ar[7], 4) +
pb64.encb(ar[50], ar[8], ar[29], 4) +
pb64.encb(ar[9], ar[30], ar[51], 4) +
pb64.encb(ar[31], ar[52], ar[10], 4) +
pb64.encb(ar[53], ar[11], ar[32], 4) +
pb64.encb(ar[12], ar[33], ar[54], 4) +
pb64.encb(ar[34], ar[55], ar[13], 4) +
pb64.encb(ar[56], ar[14], ar[35], 4) +
pb64.encb(ar[15], ar[36], ar[57], 4) +
pb64.encb(ar[37], ar[58], ar[16], 4) +
pb64.encb(ar[59], ar[17], ar[38], 4) +
pb64.encb(ar[18], ar[39], ar[60], 4) +
pb64.encb(ar[40], ar[61], ar[19], 4) +
pb64.encb(ar[62], ar[20], ar[41], 4) +
pb64.encb(0, 0, ar[63], 2));
break;
}
rv = '$' + alg.toString() + '$' + (roundsExplicit ? ('rounds=' + rounds.toString() + '$') : '') + salt + '$' + h;
return rv;
};
module.exports = hashCrypt;