tinyhmacmd5 0.1.5 → 0.1.6

package/README.md

@@ -3,7 +3,7 @@ English | [中文](README-zh.md)
 # Tiny HMAC MD5
 
 A tiny, fully compliant HMAC-MD5 implementation for JavaScript:  
-[`browser.min.js`](browser.min.js) is only **1045 bytes**.
+[`browser.min.js`](browser.min.js) is only **1017 bytes**.
 
 - **Input type**: `string` (UTF‑8), `Uint8Array` or `Uint8ClampedArray`
 - **Output type**: hex `string` or raw `Uint8Array`
@@ -11,6 +11,8 @@ A tiny, fully compliant HMAC-MD5 implementation for JavaScript:
 - **TypeScript‑ready**: [`main.d.ts`](main.d.ts)
 - **0 dependencies**
 
+The goal of `tinyhmacmd5` is to strike a balance between size and performance, rather than sacrificing performance for the sake of minimizing size. Therefore, some performance-oriented optimizations are intentionally retained, and the final size is not the smallest theoretically achievable.
+
 **Live demo**: https://bddjr.github.io/tinyhmacmd5/
 
 > [!WARNING]  
@@ -109,6 +111,8 @@ Environments that support [Nullish coalescing assignment (`??=`)](https://develo
 - Firefox ≥ 79 (2020-07-28)
 - Safari ≥ 14 (2020-09-16)
 
+Not recommended for use in environments that support `node:crypto`, as `node:crypto` already provides HMAC-MD5.
+
 ---
 
 ## Why I Made This Project
@@ -131,7 +135,7 @@ During the adaptation, I discovered that `blueimp-md5` did not correctly handle
 
 I also found that using `Array` to process inputs over 512 MiB could throw a `RangeError`, so I replaced it with `Int32Array`.
 
-I demonstrated in practice that HMAC-MD5 can be implemented in an extremely small footprint (1045 bytes) while also improving reliability.
+I demonstrated in practice that HMAC-MD5 can be implemented in an extremely small footprint (1017 bytes) while also improving reliability.
 
 Maybe not many people care about saving just a few KB, but `tinyhmacmd5` exists precisely to "explore the unknown".
 

package/browser.min.js

@@ -1,2 +1,2 @@
 /** @license https://bddjr.github.io/tinyhmacmd5/lic */
-{let r=1732584193,e=271733878,n=~r,t=~e,o=2**32,f=Math,a=f.floor,l=r=>16*a((r+8)/64)+16,c=[],d=(d,i,u=0,g=l(i),h,s,w,y,A=[r,t,n,e],v=[...A])=>{for(d[g-1]=0|8*i/o,d[g-2]=0|8*i,d[a(i/4)]|=128<<i%4*8;u<d.length;u+=16){for(y=g=0;g<64;)A[3&y]=0|((h=0|(h=A[3&++y],s=A[3&++y],w=A[3&++y],((i=g>>4<<2)?i>4?i>8?s^(h|~w):h^s^w:h&w|s&~w:h&s|~h&w)+(0|d[u+(g*(29521>>i)+(1296>>i)&15)])+(s="',16%).4$+07&*/5".charCodeAt(i+g%4),c[63-g++]??=0|o*f.abs(f.sin(g)))+A[y+1&3]))<<s|h>>>64-s)+A[y+2&3];for(y=4;y;)v[--y]=A[y]=0|v[y]+A[y]}return A},i=(r,e,n=("string"==typeof r?r=(new TextEncoder).encode(r):r).length,t=new Int32Array(l(4*e+n)),o=0)=>{for(;o<n;)t[e++]=r[o++]|r[o++]<<8|r[o++]<<16|r[o++]<<24;return[t,n]};var md5=(r,e,n)=>{var t=16,o=null!=e,[f,a]=i(r,o*t),l=new Uint8Array(t);if(o){let[r,n]=i(e,0),o=[];for(n>64&&(r=d(r,n));t;)o[--t]=1785358954^(f[t]=909522486^r[t]);t=16,f=o.concat(d(f,64+a)),a=80}for(f=d(f,a);t;)l[--t]=f[t>>2]>>>t%4*8;return n?l:l.reduce((r,e)=>r+(e>>4&&"")+e.toString(16),"")}}
+{let r=1732584193,n=271733878,t=[],e=Math,o=e.floor,f=r=>16*o((r+72)/64),a=(a,l,c=0,i=f(l),d,g,h,u,s=[r,~n,~r,n],w=[...s])=>{for(a[i-1]=0|l/2**29,a[i-2]=0|8*l,a[o(l/4)]|=128<<8*l;c<a.length;){for(i=0;i<64;)s[u&=3]=0|((d=0|(d=s[3&++u],g=s[3&++u],h=s[3&++u],((l=i>>4<<2)?l>4?l>8?g^(d|~h):d^g^h:d&h|g&~h:d&g|~d&h)+(0|a[c+(i*(29521>>l)+(1296>>l)&15)])+(g="',16%).4$+07&*/5".charCodeAt(l+i%4),t[63-i++]??=0|2**32*e.abs(e.sin(i)))+s[u+1&3]))<<g|d>>>64-g)+s[u+2&3];for(;u;c+=4)w[--u]=s[u]=0|w[u]+s[u]}return s},l=(r,n,t=("string"==typeof r?r=(new TextEncoder).encode(r):r).length,e=new Int32Array(f(4*n+t)),o=0)=>{for(;o<t;)e[n++]=r[o++]|r[o++]<<8|r[o++]<<16|r[o++]<<24;return[e,t]};var md5=(r,n,t)=>{var e=16,o=null!=n,[f,c]=l(r,o*e),i=[],d=t?new Uint8Array(e):"";if(o){let[r,t]=l(n,0);for(t>64&&(r=a(r,t));e;)i[--e]=1785358954^(f[e]=909522486^r[e]);e=16,f=i.concat(a(f,64+c)),c=80}for(f=a(f,c);e;t?d[e]=i:d=(i>>4&&"")+i.toString(16)+d)i=f[--e>>2]>>8*e&255;return d}}

package/main.js

@@ -4,20 +4,17 @@
 
 let A = 1732584193
   , D = 271733878
-  , C = ~A
-  , B = ~D
 
-let $2_32 = 2 ** 32
+/** @type {number[]} MD5 constants cached in memory */
+let K = []
 
 let $Math = Math
 
 let floor = $Math.floor
 
 /** @param {number} byteLen */
-let toBinlLen = (byteLen) => floor((byteLen + 8) / 64) * 16 + 16
-
-/** @type {number[]} MD5 constants cached in memory */
-let K = []
+// `byteLen` may be >= 2**32, so cannot use `>>>` as a replacement for `floor`
+let toBinlLen = (byteLen) => floor((byteLen + 72) / 64) * 16
 
 /**
  * Calculate the MD5 of an array of little-endian words, and a byte length.
@@ -43,19 +40,20 @@ let binlMD5 = (
   t1,
   t2,
   oi,
-  output = [A, B, C, D],
+  output = [A, ~D, ~A, D],
   oldOutput = [...output],
 ) => {
   // console.time("binlMD5")
 
   // append padding
-  x[j - 1] = 0 | l * 8 / $2_32;
+  // `l` may be >= 2**32, so cannot use `>>>` as a replacement for `floor`
+  x[j - 1] = 0 | l / 2 ** 29;
   x[j - 2] = 0 | l * 8;
-  x[floor(l / 4)] |= 0x80 << l % 4 * 8;
+  x[floor(l / 4)] |= 0x80 << l * 8;
 
-  for (; i < x.length; i += 16) {
-    for (oi = j = 0; j < 64;) {
-      output[oi & 3] = (
+  for (; i < x.length;) {
+    for (j = 0; j < 64;) {
+      output[oi &= 3] = (
         t0 = 0 | (
           (
             t0 = output[++oi & 3],
@@ -74,14 +72,14 @@ let binlMD5 = (
           ) +
           (
             t1 = "',16%).4$+07&*/5".charCodeAt(l + j % 4),
-            K[63 - j++] ??= 0 | $2_32 * $Math.abs($Math.sin(j))
+            K[63 - j++] ??= 0 | 2 ** 32 * $Math.abs($Math.sin(j))
           ) +
           output[oi + 1 & 3]
         ),
         0 | (t0 << t1 | t0 >>> 64 - t1) + output[oi + 2 & 3]
       )
     }
-    for (oi = 4; oi;) {
+    for (; oi; i += 4) {
       oldOutput[--oi] = output[oi] = 0 | oldOutput[oi] + output[oi]
     }
   }
@@ -139,34 +137,40 @@ var md5 = (data, key, raw) => {
   var i = 16
     , hasKey = key != null
     , [bdata, dataByteLen] = inputToBinl(data, /**@type {*}*/(hasKey) * i)
-    , out = new Uint8Array(i)
+
+  /** @type {*} */
+  var temp = []
+
+  /** @type {*} */
+  var out = raw ? new Uint8Array(i) : ''
 
   if (hasKey) {
     // HMAC
     let [bkey, keyByteLen] = inputToBinl(key, 0)
-    let opad = []
     if (keyByteLen > 64) {
       bkey = binlMD5(bkey, keyByteLen)
     }
     for (; i;) {
       // (0x36363636 ^ 0x5c5c5c5c) == 0x6a6a6a6a
-      opad[--i] = 0x6a6a6a6a ^ (bdata[i] = 0x36363636 ^ bkey[i])
+      temp[--i] = 0x6a6a6a6a ^ (bdata[i] = 0x36363636 ^ bkey[i])
     }
     i = 16
-    bdata = opad.concat(binlMD5(bdata, 64 + dataByteLen))
+    bdata = temp.concat(binlMD5(bdata, 64 + dataByteLen))
     dataByteLen = 80
   }
 
   bdata = binlMD5(bdata, dataByteLen)
 
-  // binl to bytes
-  for (; i;) {
-    out[--i] = bdata[i >> 2] >>> i % 4 * 8
+  // binl to bytes or hex
+  for (; i;
+    raw
+      ? out[i] = temp
+      : out = (temp >> 4 && '') + temp.toString(16) + out
+  ) {
+    temp = bdata[--i >> 2] >> i * 8 & 0xff
   }
 
-  return raw
-    ? out
-    : out.reduce((p, v) => p + (v >> 4 && '') + v.toString(16), '')
+  return out
 }
 
 export default md5

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tinyhmacmd5",
-  "version": "0.1.5",
-  "description": "A tiny, fully compliant HMAC-MD5 implementation for JavaScript: browser.min.js is only 1045 bytes.",
+  "version": "0.1.6",
+  "description": "A tiny, fully compliant HMAC-MD5 implementation for JavaScript: browser.min.js is only 1017 bytes.",
   "author": "bddjr",
   "license": "MIT",
   "type": "module",
@@ -17,20 +17,35 @@
   "keywords": [
     "md5",
     "hash",
+    "hashing",
     "hmac",
     "hmacmd5",
     "hmac-md5",
     "tiny",
+    "tiny-hmac-md5",
+    "small",
+    "lightweight",
+    "minimal",
     "hex",
     "crypto",
     "encryption",
     "cryptography",
+    "message-digest",
+    "cryptographic-hash",
+    "web",
+    "pure-javascript",
+    "esm",
+    "javascript",
+    "typescript",
+    "frontend",
+    "front-end",
     "blueimp",
     "blueimp-md5",
     "js-md5",
     "crypto-js",
-    "javascript",
-    "typescript"
+    "tiny-hashes",
+    "tiny-js-md5",
+    "spark-md5"
   ],
   "repository": {
     "type": "git",