tinyhmacmd5 0.3.3-es2026 → 0.4.0-es2026

package/README.md

@@ -2,7 +2,7 @@ English | [中文](README-zh.md)
 
 # Tiny HMAC MD5
 
-A tiny and reliable HMAC-MD5 implementation for JavaScript: [`browser.min.js`](browser.min.js) is only **950 bytes**.
+A tiny and reliable HMAC-MD5 implementation for JavaScript: [`browser.min.js`](browser.min.js) is only **989 bytes**.
 
 - **Input type**: `string` (UTF‑8), `Uint8Array` or `Uint8ClampedArray`
 - **Output type**: hex `string` or bytes `Uint8Array`
@@ -168,19 +168,19 @@ pnpm benchmark
 ```
 Data length: 104857600 chars (100MiB)
 --------------------------------------------------
-tinyhmacmd5     : 640.00 ms
-js-md5          : 131.10 ms
-blueimp-md5     : 3825.62 ms
-crypto-js       : 1572.49 ms
-node:crypto     : 130.07 ms
+tinyhmacmd5     : 569.00 ms
+js-md5          : 130.30 ms
+blueimp-md5     : 3851.57 ms
+crypto-js       : 1561.18 ms
+node:crypto     : 130.29 ms
 --------------------------------------------------
 ✅ All pure JS implementations match node:crypto result.
 
 --- Pure 513MiB Test (No prior small tests) ---
-tinyhmacmd5 HMAC-MD5 timer: 3.184s
-node:crypto HMAC-MD5 timer: 552.938ms
-tinyhmacmd5 MD5 timer: 3.175s
-node:crypto MD5 timer: 553.263ms
+tinyhmacmd5 HMAC-MD5 timer: 2.796s
+node:crypto HMAC-MD5 timer: 552.718ms
+tinyhmacmd5 MD5 timer: 2.775s
+node:crypto MD5 timer: 551.291ms
 ```
 
 CPU: i5-10600KF  
@@ -206,7 +206,7 @@ During the adaptation, I discovered that `blueimp-md5` did not correctly handle
 
 I also found that using `Array` to process inputs over 512 MiB could throw a `RangeError`, so I replaced it with `Int32Array`.
 
-I demonstrated in practice that HMAC-MD5 can be implemented in an extremely small footprint (950 bytes) while also improving reliability.
+I demonstrated in practice that HMAC-MD5 can be implemented in an extremely small footprint (989 bytes) while also improving reliability.
 
 Maybe not many people care about saving just a few KB, but `tinyhmacmd5` exists precisely to "explore the unknown".
 

package/browser.min.js

@@ -1 +1 @@
-/*! npmjs.com/tinyhmacmd5 */{let r=Math,e=Int32Array,n=new e(64).map((e,n)=>2**32*r.abs(r.sin(n+1))),t=(t,o,f=0,a,l=1732584193,w=271733878,i,c,d=t.length,h=e.of(l,~w,~l,w),s=new e(h))=>{for(t[d-1]=o/2**29,t[r.floor(o/4)]|=128<<(t[d-2]=o<<3);f<d;f+=16){for(o=0;o<16;o+=4)for(a=0;a<16;)h[c&=3]=((w=h[c]+n[4*o+a]+(l=h[3&++c],w=h[3&++c],i=h[3&++c],o?w^(o>4?o>8?l|~i:l^i:i&(l^w)):l&w|~l&i)+t[f+(a*(29521>>o)+(1296>>o)&15)])<<(i="',16%).4$+07&*/5".charCodeAt(3&a++|o)-32)|w>>>32-i)+l;for(;c;)s[--c]=h[c]+=s[c]}return h},o=(n,t,o=("string"==typeof n?n=(new TextEncoder).encode(n):n).length,f=new e(t+16*r.ceil((o+9)/64)),a=0)=>{for(;a<o;)f[t++]=n[a++]|n[a++]<<8|n[a++]<<16|n[a++]<<24;return[f,o]};var md5=(r,n,f)=>{var a=16,l=null!=n,[w,i]=o(r,l*a),c=new Uint8Array(a);if(l){let[r,f]=o(n,0),l=new e(32);for(f>64&&(r=t(r,f)),f=a;f;)l[--f]=1785358954^(w[f]=909522486^r[f]);l.set(t(w,64+i),a),w=l,i=80}for(w=t(w,i);a;)c[--a]=w[a>>2]>>8*a;return f?c:c.toHex()}}
+/*! npmjs.com/tinyhmacmd5 */{let e=Math,r=Int32Array,n=Uint8Array,t=new r(64).map((r,n)=>2**32*e.abs(e.sin(n+1))),f=new n(t.buffer)[28]<2,o=(n,f,o=0,a,l=1732584193,w=271733878,u,i,s=n.length,c=r.of(l,~w,~l,w),d=new r(c))=>{for(n[s-1]=f/2**29,n[e.floor(f/4)]|=128<<(n[s-2]=f<<3);o<s;o+=16){for(f=0;f<16;f+=4)for(a=0;a<16;)c[i&=3]=((w=c[i]+t[4*f+a]+(l=c[3&++i],w=c[3&++i],u=c[3&++i],w^(f>4?f>8?l|~u:l^u:f?u&(l^w):~l&(w^u)))+n[o+(a*(29521>>f)+(1296>>f)&15)])<<(u="',16%).4$+07&*/5".charCodeAt(3&a++|f))|w>>>32-u)+l;for(;i;)d[--i]=c[i]+=d[i]}return c},a=(t,o,a=("string"==typeof t?t=(new TextEncoder).encode(t):t).length,l=new r(o+16*e.ceil((a+9)/64)),w=new n(l.buffer),u)=>{for(f?w.set(t,4*o):u=0;u<a;3&++u||o++)l[o]|=t[u]<<8*u;return[l,a]};var md5=(e,t,f)=>{var l=16,w=null!=t,[u,i]=a(e,w*l),s=new n(l);if(w){let[e,n]=a(t,0),f=new r(32);for(n>64&&(e=o(e,n)),n=l;n;)f[--n]=1785358954^(u[n]=909522486^e[n]);f.set(o(u,64+i),l),u=f,i=80}for(u=o(u,i);l;)s[--l]=u[l>>2]>>8*l;return f?s:s.toHex()}}

package/main.js

@@ -6,9 +6,14 @@ let $Math = Math
 
 let $Int32Array = Int32Array
 
+let $Uint8Array = Uint8Array
+
 /** MD5 constants cached in memory */
 let K = new $Int32Array(64).map((v, i) => 2 ** 32 * $Math.abs($Math.sin(i + 1)))
 
+/** is little-endian */
+let isLE = new $Uint8Array(K.buffer)[28] < 2
+
 /**
  * Calculate the MD5 of an array of little-endian words, and a byte length.
  *
@@ -36,7 +41,8 @@ let wordsMD5 = (
   oldOutput = new $Int32Array(output),
 ) => {
   // append padding
-  // `l` may be >= 2**32, so cannot use `>>>` as a replacement for `floor`
+  // `l` may be >= 2**32, so cannot use `>>>` as a replacement for `floor`.
+  // `l << 3` cannot be changed to `l * 8`, as it would trigger JIT deoptimization on large inputs.
   x[xLen - 1] = l / 2 ** 29;
   x[$Math.floor(l / 4)] |= 0x80 << (x[xLen - 2] = l << 3);
 
@@ -52,20 +58,20 @@ let wordsMD5 = (
                 t0 = output[++oi & 3],
                 t1 = output[++oi & 3],
                 t2 = output[++oi & 3],
-                l
-                  ? t1 ^ (
-                    l > 4
-                      ? l > 8
-                        ? t0 | ~t2     // Round 4: I
-                        : t0 ^ t2      // Round 3: H
-                      : t2 & (t0 ^ t1) // Round 2: G
-                  )
-                  : t0 & t1 | ~t0 & t2 // Round 1: F
+                t1 ^ (
+                  l > 4
+                    ? l > 8
+                      ? t0 | ~t2        // Round 4: I
+                      : t0 ^ t2         // Round 3: H
+                    : l
+                      ? t2 & (t0 ^ t1)  // Round 2: G
+                      : ~t0 & (t1 ^ t2) // Round 1: F
+                )
               ) +
               x[i + (j * (0x7351 >> l) + (0x0510 >> l) & 15)]
             )
           ) << (
-            t2 = "',16%).4$+07&*/5".charCodeAt(j++ & 3 | l) - 32
+            t2 = "',16%).4$+07&*/5".charCodeAt(j++ & 3 | l)
           ) | t1 >>> 32 - t2
         ) + t0
       }
@@ -83,6 +89,8 @@ let wordsMD5 = (
  * @param {*} input
  * @param {number} j pad int32 length (0 or 16)
  * 
+ * @param {number} [i]
+ * 
  * @returns {[Int32Array<ArrayBuffer>, number]}
  */
 let inputToWords = (
@@ -97,15 +105,16 @@ let inputToWords = (
   // Using `Array` to process inputs over 512 MiB could throw a `RangeError`,
   // so I replaced it with `Int32Array`.
   output = new $Int32Array(j + $Math.ceil((byteLen + 9) / 64) * 16),
-  i = 0,
+  outputBytes = new $Uint8Array(output.buffer),
+  i,
 ) => {
-  for (; i < byteLen;) {
-    output[j++] = (
-      input[i++] |
-      input[i++] << 8 |
-      input[i++] << 16 |
-      input[i++] << 24
-    )
+  // (fast) little-endian
+  isLE
+    ? outputBytes.set(input, j * 4)
+    : i = 0
+  // (slow) big-endian
+  for (; i < byteLen; ++i & 3 || j++) {
+    output[j] |= input[i] << 8 * i
   }
   return [output, byteLen]
 }
@@ -125,7 +134,7 @@ var md5 = (data, key, raw) => {
   var i = 16
     , hasKey = key != null
     , [bdata, temp] = inputToWords(data, /**@type {*}*/(hasKey) * i)
-    , out = new Uint8Array(i)
+    , out = new $Uint8Array(i)
 
   if (hasKey) {
     // HMAC

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tinyhmacmd5",
-  "version": "0.3.3-es2026",
-  "description": "A tiny and reliable HMAC-MD5 implementation for JavaScript: browser.min.js is only 950 bytes.",
+  "version": "0.4.0-es2026",
+  "description": "A tiny and reliable HMAC-MD5 implementation for JavaScript: browser.min.js is only 989 bytes.",
   "author": "bddjr",
   "license": "MIT",
   "type": "module",