tinyhmacmd5 0.4.1-es2026 → 0.4.2-es2026

package/README.md

@@ -2,7 +2,9 @@ English | [中文](README-zh.md)
 
 # Tiny HMAC MD5
 
-A tiny and reliable HMAC-MD5 implementation for JavaScript: [`browser.min.js`](browser.min.js) is only **982 bytes**.
+A tiny and reliable HMAC-MD5 implementation for JavaScript:
+
+[`browser.min.js`](browser.min.js) is only **975 bytes**.
 
 - **Input type**: `string` (UTF‑8), `Uint8Array` or `Uint8ClampedArray`
 - **Output type**: hex `string` or bytes `Uint8Array`
@@ -168,19 +170,19 @@ pnpm benchmark
 ```
 Data length: 104857600 chars (100MiB)
 --------------------------------------------------
-tinyhmacmd5     : 568.29 ms
-js-md5          : 130.97 ms
-blueimp-md5     : 3835.78 ms
-crypto-js       : 1560.48 ms
-node:crypto     : 130.22 ms
+tinyhmacmd5     : 550.92 ms
+js-md5          : 128.96 ms
+blueimp-md5     : 3837.83 ms
+crypto-js       : 1562.08 ms
+node:crypto     : 129.08 ms
 --------------------------------------------------
 ✅ All pure JS implementations match node:crypto result.
 
 --- Pure 513MiB Test (No prior small tests) ---
-tinyhmacmd5 HMAC-MD5 timer: 2.789s
-node:crypto HMAC-MD5 timer: 552.479ms
-tinyhmacmd5 MD5 timer: 2.778s
-node:crypto MD5 timer: 550.663ms
+tinyhmacmd5 HMAC-MD5 timer: 2.706s
+node:crypto HMAC-MD5 timer: 547.808ms
+tinyhmacmd5 MD5 timer: 2.693s
+node:crypto MD5 timer: 550.144ms
 ```
 
 CPU: i5-10600KF  
@@ -206,7 +208,7 @@ During the adaptation, I discovered that `blueimp-md5` did not correctly handle
 
 I also found that using `Array` to process inputs over 512 MiB could throw a `RangeError`, so I replaced it with `Int32Array`.
 
-I demonstrated in practice that HMAC-MD5 can be implemented in an extremely small footprint (982 bytes) while also improving reliability.
+I demonstrated in practice that HMAC-MD5 can be implemented in an extremely small footprint (975 bytes) while also improving reliability.
 
 Maybe not many people care about saving just a few KB, but `tinyhmacmd5` exists precisely to "explore the unknown".
 

package/browser.min.js

@@ -1 +1 @@
-/*! npmjs.com/tinyhmacmd5 */{let e=Math,r=Int32Array,n=Uint8Array,t=new r(64).map((r,n)=>2**32*e.abs(e.sin(n+1))),f=1&new n(t.buffer)[3],o=(n,f,o=0,a,l=1732584193,w=271733878,u,i,s=n.length,c=r.of(l,~w,~l,w),d=new r(c))=>{for(n[s-1]=f/2**29,n[e.floor(f/4)]|=128<<(n[s-2]=f<<3);o<s;o+=16){for(f=0;f<16;f+=4)for(a=0;a<16;)c[i&=3]=((w=c[i]+t[4*f+a]+(l=c[3&++i],w=c[3&++i],u=c[3&++i],w^(f>4?f>8?l|~u:l^u:f?u&(l^w):~l&(w^u)))+n[o+(a*(29521>>f)+(1296>>f)&15)])<<(u="',16%).4$+07&*/5".charCodeAt(3&a++|f))|w>>>32-u)+l;for(;i;)d[--i]=c[i]+=d[i]}return c},a=(t,o,a=("string"==typeof t?t=(new TextEncoder).encode(t):t).length,l=new r(o+16*e.ceil((a+9)/64)),w=f&&new n(l.buffer,4*o).set(t))=>{for(;w<a;3&++w||o++)l[o]|=t[w]<<8*w;return[l,a]};var md5=(e,t,f)=>{var l=16,w=null!=t,[u,i]=a(e,w*l),s=new n(l);if(w){let[e,n]=a(t,0),f=new r(32);for(n>64&&(e=o(e,n)),n=l;n;)f[--n]=1785358954^(u[n]=909522486^e[n]);f.set(o(u,64+i),l),u=f,i=80}for(u=o(u,i);l;)s[--l]=u[l>>2]>>8*l;return f?s:s.toHex()}}
+/*! npmjs.com/tinyhmacmd5 */{let e=Int32Array,r=Uint8Array,n=new e(64).map((e,r)=>2**32*Math.abs(Math.sin(r+1))),t=1&new r(n.buffer)[3],f=(r,t,f=0,o,a=1732584193,w=271733878,l,u,h=r.length,s=e.of(a,~w,~a,w),d=new e(s))=>{for(r[h-1]=t/2**29,r[(t-t%4)/4]|=128<<(r[h-2]=t<<3);f<h;f+=16){for(t=o=0;t<16;t+=4)for(;o<4*t+16;)s[u&=3]=((w=s[u]+n[o]+(a=s[3&++u],w=s[3&++u],l=s[3&++u],w^(t>4?t>8?a|~l:a^l:t?l&(a^w):~a&(w^l)))+r[f+(o*(29521>>t)+(1296>>t)&15)])<<(l="',16%).4$+07&*/5".charCodeAt(3&o++|t))|w>>>32-l)+a;for(;u;)d[--u]=s[u]+=d[u]}return s},o=(n,f,o=("string"==typeof n?n=(new TextEncoder).encode(n):n).length,a=new e(f+18+(o-(o+8&63))/4),w=t&&new r(a.buffer,4*f).set(n))=>{for(;w<o;3&++w||f++)a[f]|=n[w]<<8*w;return[a,o]};var md5=(n,t,a)=>{var w=16,l=null!=t,[u,h]=o(n,l*w),s=new r(w);if(l){let[r,n]=o(t,0),a=new e(32);for(n>64&&(r=f(r,n)),n=w;n;)a[--n]=1785358954^(u[n]=909522486^r[n]);a.set(f(u,64+h),w),u=a,h=80}for(u=f(u,h);w;)s[--w]=u[w>>2]>>8*w;return a?s:s.toHex()}}

package/main.js

@@ -2,14 +2,12 @@
 
 // Adapted from https://github.com/blueimp/JavaScript-MD5
 
-let $Math = Math
-
 let $Int32Array = Int32Array
 
 let $Uint8Array = Uint8Array
 
 /** MD5 constants cached in memory */
-let K = new $Int32Array(64).map((v, i) => 2 ** 32 * $Math.abs($Math.sin(i + 1)))
+let K = new $Int32Array(64).map((v, i) => 2 ** 32 * Math.abs(Math.sin(i + 1)))
 
 /** is little-endian */
 let isLE = new $Uint8Array(K.buffer)[3] & 1
@@ -44,16 +42,16 @@ let wordsMD5 = (
   // `l` may be >= 2**32, so cannot use `>>>` as a replacement for `floor`.
   // `l << 3` cannot be changed to `l * 8`, as it would trigger JIT deoptimization on large inputs.
   x[xLen - 1] = l / 2 ** 29;
-  x[$Math.floor(l / 4)] |= 0x80 << (x[xLen - 2] = l << 3);
+  x[(l - l % 4) / 4] |= 0x80 << (x[xLen - 2] = l << 3);
 
   for (; i < xLen; i += 16) {
-    for (l = 0; l < 16; l += 4) {
-      for (j = 0; j < 16;) {
+    for (l = j = 0; l < 16; l += 4) {
+      for (; j < 4 * l + 16;) {
         output[oi &= 3] = (
           (
             t1 = (
               output[oi] +
-              K[l * 4 + j] +
+              K[j] +
               (
                 t0 = output[++oi & 3],
                 t1 = output[++oi & 3],
@@ -98,13 +96,14 @@ let inputToWords = (
   j,
   // var:
   byteLen = (
+    // Don't replace the type check below with something like `input.big`; it's unreliable.
     typeof input == 'string'
       ? input = new TextEncoder().encode(input)
       : input
   ).length,
   // Using `Array` to process inputs over 512 MiB could throw a `RangeError`,
   // so I replaced it with `Int32Array`.
-  output = new $Int32Array(j + $Math.ceil((byteLen + 9) / 64) * 16),
+  output = new $Int32Array(j + 18 + (byteLen - (byteLen + 8 & 63)) / 4),
   // (fast) little-endian
   i = isLE && new $Uint8Array(output.buffer, j * 4).set(input),
 ) => {

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tinyhmacmd5",
-  "version": "0.4.1-es2026",
-  "description": "A tiny and reliable HMAC-MD5 implementation for JavaScript: browser.min.js is only 982 bytes.",
+  "version": "0.4.2-es2026",
+  "description": "A tiny and reliable HMAC-MD5 implementation for JavaScript: browser.min.js is only 975 bytes.",
   "author": "bddjr",
   "license": "MIT",
   "type": "module",