tinyhmacmd5 0.5.0 → 0.5.1-es2026

package/README.md

@@ -2,9 +2,9 @@ English | [中文](README-zh.md)
 
 # Tiny HMAC MD5
 
-A tiny and reliable HMAC-MD5 implementation for JavaScript:
+A tiny, efficient and reliable HMAC-MD5 implementation for JavaScript.
 
-[`browser.min.js`](browser.min.js) is only **979 bytes**.
+[`browser.min.js`](browser.min.js) is only **923 bytes**.
 
 - **Input type**: `string` (UTF‑8), `Uint8Array` or `Uint8ClampedArray`
 - **Output type**: hex `string` or bytes `Uint8Array`
@@ -25,25 +25,23 @@ If you need a smaller implementation that targets ECMAScript 2026, see the [`es2
 ## Benchmark
 
 ```
-pnpm benchmark
-```
-
-```
+> pnpm benchmark
+$ node scripts/benchmark.mjs && node scripts/test-513MiB.mjs
 Data length: 104857600 chars (100MiB)
 --------------------------------------------------
-tinyhmacmd5     : 550.92 ms
-js-md5          : 128.96 ms
-blueimp-md5     : 3837.83 ms
-crypto-js       : 1562.08 ms
-node:crypto     : 129.08 ms
+tinyhmacmd5     : 388.35 ms
+js-md5          : 128.71 ms
+blueimp-md5     : 3823.48 ms
+crypto-js       : 1553.58 ms
+node:crypto     : 129.86 ms
 --------------------------------------------------
 ✅ All pure JS implementations match node:crypto result.
 
 --- Pure 513MiB Test (No prior small tests) ---
-tinyhmacmd5 HMAC-MD5 timer: 2.706s
-node:crypto HMAC-MD5 timer: 547.808ms
-tinyhmacmd5 MD5 timer: 2.693s
-node:crypto MD5 timer: 550.144ms
+tinyhmacmd5 HMAC-MD5 timer: 1.886s
+node:crypto HMAC-MD5 timer: 548.216ms
+tinyhmacmd5 MD5 timer: 1.868s
+node:crypto MD5 timer: 548.352ms
 ```
 
 CPU: i5-10600KF  
@@ -62,7 +60,7 @@ As a result, the final size is not the smallest theoretically achievable.
 ### npm
 
 ```
-npm i tinyhmacmd5
+npm i tinyhmacmd5@es2026
 ```
 
 ```js
@@ -78,7 +76,7 @@ You can also use other package managers (e.g. `pnpm` or `yarn`) in place of `npm
 See https://www.jsdelivr.com/package/npm/tinyhmacmd5
 
 ```html
-<script src="https://cdn.jsdelivr.net/npm/tinyhmacmd5"></script>
+<script src="https://cdn.jsdelivr.net/npm/tinyhmacmd5@es2026"></script>
 ```
 
 It will define the `md5` function using `var`.
@@ -86,7 +84,7 @@ It will define the `md5` function using `var`.
 ### UNPKG
 
 ```html
-<script src="https://unpkg.com/tinyhmacmd5"></script>
+<script src="https://unpkg.com/tinyhmacmd5@es2026"></script>
 ```
 
 It will define the `md5` function using `var`.
@@ -96,6 +94,12 @@ It will define the `md5` function using `var`.
 You can embed [`browser.min.js`](browser.min.js) directly into your script.  
 It will define the `md5` function using `var`.
 
+If you are concerned that others might not recognize what this is, you can add the following comment:
+
+```js
+// tinyhmacmd5 (The Unlicense)
+```
+
 ---
 
 ## Example
@@ -173,22 +177,22 @@ md5(data)
 
 ## Runtime Environment
 
-Environments that support [Exponentiation (`**`)](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Operators/Exponentiation) and [`TextEncoder`](https://developer.mozilla.org/docs/Web/API/TextEncoder) :
+Environments that support [`Uint8Array.prototype.toHex()`](https://developer.mozilla.org/docs/Web/JavaScript/Reference/Global_Objects/Uint8Array/toHex) :
 
 - Desktop
-  - Chrome ≥ 52 (2016-07-20)
-  - Edge ≥ 79 (2020-01-15)
-  - Firefox ≥ 52 (2017-03-07)
-  - Opera ≥ 39 (2016-08-02)
-  - Safari ≥ 10.1 (2017-03-27)
+  - Chrome ≥ 140 (2025-09-02)
+  - Edge ≥ 140 (2025-09-05)
+  - Firefox ≥ 133 (2024-11-26)
+  - Opera ≥ 124 (2025-11-13)
+  - Safari ≥ 18.2 (2024-12-11)
 - Mobile
-  - Chrome Android ≥ 52 (2016-07-27)
-  - Firefox for Android ≥ 52 (2017-03-07)
-  - Opera Android ≥ 41 (2016-10-25)
-  - Safari on iOS ≥ 10.3 (2017-03-27)
-  - Samsung Browser ≥ 6 (2017-08-23)
-  - WebView Android ≥ 51 (2016-06-08)
-  - WebView on iOS ≥ 10.3 (2017-03-27)
+  - Chrome Android ≥ 140 (2025-09-02)
+  - Firefox for Android ≥ 133 (2024-11-26)
+  - Opera Android ≥ 92 (2025-10-08)
+  - Safari on iOS ≥ 18.2 (2024-12-11)
+  - Samsung Browser ×
+  - WebView Android ≥ 140 (2025-09-02)
+  - WebView on iOS ≥ 18.2 (2024-12-11)
 
 Not recommended for use in environments that support `node:crypto`, as `node:crypto` already provides HMAC-MD5.
 
@@ -208,3 +212,9 @@ cd tinyhmacmd5
 pnpm i
 pnpm test
 ```
+
+---
+
+## 
+
+INVINCIBLE EXPERIMENT!

package/browser.min.js

@@ -1 +1 @@
-{let e=Int32Array,r=Uint8Array,n=new e(64).map((e,r)=>2**32*Math.abs(Math.sin(r+1))),t=1&new r(n.buffer)[3],f=(r,t,f=0,o,a=1732584193,w=271733878,l,u,h=r.length,i=e.of(a,~w,~a,w),s=new e(i))=>{for(r[h-1]=t/2**29,r[(t-t%4)/4]|=128<<(r[h-2]=t<<3);f<h;f+=16){for(t=o=0;t<16;t+=4)for(;o<4*t+16;)i[u&=3]=((w=i[u]+n[o]+(a=i[3&++u],w=i[3&++u],l=i[3&++u],w^(t>4?t>8?a|~l:a^l:t?l&(a^w):~a&(w^l)))+r[f+(o*(29521>>t)+(1296>>t)&15)])<<(l="',16%).4$+07&*/5".charCodeAt(3&o++|t))|w>>>32-l)+a;for(;u;)s[--u]=i[u]+=s[u]}return i},o=(n,f,o=("string"==typeof n?n=(new TextEncoder).encode(n):n).length,a=new e(f+18+(o-(o+8&63))/4),w=t&&new r(a.buffer,4*f).set(n))=>{for(;w<o;3&++w||f++)a[f]|=n[w]<<8*w;return[a,o]};var md5=(n,t,a)=>{var w=16,l=null!=t,[u,h]=o(n,l*w),i=a?new r(w):"";if(l){let[r,n]=o(t,0),a=new e(32);for(n>64&&(r=f(r,n)),n=w;n;)a[--n]=1785358954^(u[n]=909522486^r[n]);a.set(f(u,64+h),w),u=a,h=80}for(u=f(u,h);w;a?i[w]=h:i=(h>>4&&"")+h.toString(16)+i)h=u[--w>>2]>>8*w&255;return i}}
+{let e=Int32Array,r=Uint8Array,n=new e(64).map((e,r)=>2**32*Math.sin(++r%Math.PI)),t=(r,t,f=0,o=1732584193,a=271733878,l=e.of(o,~a,~o,a),w=r.length)=>{for(r[w-1]=t/2**29,r[(t-t%4)/4]|=128<<(r[w-2]=t<<3);f<w;f+=16){let{0:e,1:w,2:u,3:h}=l;for(t=o=0;t<16;t+=4)for(;o<4*t+16;w=0|((e+=n[o]+(u^(t>4?t>8?w|~h:w^h:t?h&(w^u):~w&(u^h)))+r[f+(o++*(29521>>t)+(1296>>t)&15)])<<a|e>>>32-a)+(e=h,h=u,u=w))a="',16%).4$+07&*/5".charCodeAt(3&o|t);l[0]+=e,l[1]+=w,l[2]+=u,l[3]+=h}return l},f=(t,f,o=("string"==typeof t?t=(new TextEncoder).encode(t):t).length,a=new e(f+18+(o-(o+8&63))/4),l=1&new r(n.buffer)[3]&&new r(a.buffer,4*f).set(t))=>{for(;l<o;3&++l||f++)a[f]|=t[l]<<8*l;return[a,o]};var md5=(n,o,a)=>{var l=16,w=null!=o,[u,h]=f(n,w*l),d=new r(l);if(w){let[r,n]=f(o,0),a=new e(32);for(n>64&&(r=t(r,n)),n=l;n;)a[--n]=1785358954^(u[n]=909522486^r[n]);a.set(t(u,64+h),l),u=a,h=80}for(u=t(u,h);l;)d[--l]=u[l>>2]>>8*l;return a?d:d.toHex()}}

package/main.js

@@ -1,12 +1,11 @@
+// tinyhmacmd5 (The Unlicense)
+
 let $Int32Array = Int32Array
 
 let $Uint8Array = Uint8Array
 
 /** MD5 constants cached in memory */
-let K = new $Int32Array(64).map((v, i) => 2 ** 32 * Math.abs(Math.sin(i + 1)))
-
-/** is little-endian */
-let isLE = new $Uint8Array(K.buffer)[3] & 1
+let K = new $Int32Array(64).map((v, i) => 2 ** 32 * Math.sin(++i % Math.PI))
 
 /**
  * Calculate the MD5 of an array of little-endian words, and a byte length.
@@ -14,10 +13,6 @@ let isLE = new $Uint8Array(K.buffer)[3] & 1
  * @param {Int32Array<ArrayBuffer>} x little-endian words
  * @param {number} l Byte length
  * 
- * @param {number} [j]
- * @param {number} [t2]
- * @param {number} [oi]
- * 
  * @returns {Int32Array<ArrayBuffer>} MD5 Array
  */
 let wordsMD5 = (
@@ -25,14 +20,10 @@ let wordsMD5 = (
   l,
   // var:
   i = 0,
-  j,
-  t0 = 1732584193,
-  t1 = 271733878,
-  t2,
-  oi,
+  j = 1732584193,
+  cnt = 271733878,
+  output = $Int32Array.of(j, ~cnt, ~j, cnt),
   xLen = x.length,
-  output = $Int32Array.of(t0, ~t1, ~t0, t1),
-  oldOutput = new $Int32Array(output),
 ) => {
   // append padding
   // `l` may be >= 2**32, so cannot use `>>>` as a replacement for `floor`.
@@ -41,38 +32,40 @@ let wordsMD5 = (
   x[(l - l % 4) / 4] |= 0x80 << (x[xLen - 2] = l << 3);
 
   for (; i < xLen; i += 16) {
+    // Avoid array destructuring, as invoking the iterator protocol hurts performance.
+    let { 0: a, 1: b, 2: c, 3: d } = output
     for (l = j = 0; l < 16; l += 4) {
-      for (; j < 4 * l + 16;) {
-        output[oi &= 3] = (
+      for (
+        ; j < 4 * l + 16
+        ; b = 0 | (
           (
-            t1 = (
-              output[oi] +
+            (a += (
               K[j] +
-              (
-                t0 = output[++oi & 3],
-                t1 = output[++oi & 3],
-                t2 = output[++oi & 3],
-                t1 ^ (
-                  l > 4
-                    ? l > 8
-                      ? t0 | ~t2        // Round 4: I
-                      : t0 ^ t2         // Round 3: H
-                    : l
-                      ? t2 & (t0 ^ t1)  // Round 2: G
-                      : ~t0 & (t1 ^ t2) // Round 1: F
-                )
-              ) +
-              x[i + (j * (0x7351 >> l) + (0x0510 >> l) & 15)]
-            )
-          ) << (
-            t2 = "',16%).4$+07&*/5".charCodeAt(j++ & 3 | l)
-          ) | t1 >>> 32 - t2
-        ) + t0
+              (c ^ (
+                l > 4
+                  ? l > 8
+                    ? b | ~d       // Round 4: I
+                    : b ^ d        // Round 3: H
+                  : l
+                    ? d & (b ^ c)  // Round 2: G
+                    : ~b & (c ^ d) // Round 1: F
+              )) +
+              x[i + (j++ * (0x7351 >> l) + (0x0510 >> l) & 15)]
+            )) << cnt | a >>> 32 - cnt // Keep `32 -` so JS engines can recognize bit rotation (ROL/ROR).
+          ) + (
+            a = d,
+            d = c,
+            c = b
+          )
+        )
+      ) {
+        cnt = "',16%).4$+07&*/5".charCodeAt(j & 3 | l)
       }
     }
-    for (; oi;) {
-      oldOutput[--oi] = output[oi] += oldOutput[oi]
-    }
+    output[0] += a
+    output[1] += b
+    output[2] += c
+    output[3] += d
   }
   return output
 }
@@ -101,7 +94,7 @@ let inputToWords = (
   // so I replaced it with `Int32Array`.
   output = new $Int32Array(j + 18 + (byteLen - (byteLen + 8 & 63)) / 4),
   // (fast) little-endian
-  i = isLE && new $Uint8Array(output.buffer, j * 4).set(input),
+  i = new $Uint8Array(K.buffer)[3] & 1 && new $Uint8Array(output.buffer, j * 4).set(input),
 ) => {
   // (slow) big-endian
   for (; i < byteLen; ++i & 3 || j++) {
@@ -122,12 +115,11 @@ let inputToWords = (
  * @returns {string | Uint8Array<ArrayBuffer>} The MD5 (or HMAC‑MD5) digest, either as a hex string or a Uint8Array.
  */
 let md5 = (data, key, raw) => {
+  // Do not use parameter defaults to declare variables in public functions.
   var i = 16
     , hasKey = key != null
     , [bdata, temp] = inputToWords(data, /**@type {*}*/(hasKey) * i)
-
-  /** @type {*} */
-  var out = raw ? new $Uint8Array(i) : ''
+    , out = new $Uint8Array(i)
 
   if (hasKey) {
     // HMAC
@@ -148,15 +140,11 @@ let md5 = (data, key, raw) => {
   bdata = wordsMD5(bdata, temp)
 
   // words to bytes or hex
-  for (; i;
-    raw
-      ? out[i] = temp
-      : out = (temp >> 4 && '') + temp.toString(16) + out
-  ) {
-    temp = bdata[--i >> 2] >> i * 8 & 0xff
+  for (; i;) {
+    out[--i] = bdata[i >> 2] >> i * 8
   }
 
-  return out
+  return raw ? out : out.toHex()
 }
 
 export default md5

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "tinyhmacmd5",
-  "version": "0.5.0",
-  "description": "A tiny and reliable HMAC-MD5 implementation for JavaScript: browser.min.js is only 979 bytes.",
+  "version": "0.5.1-es2026",
+  "description": "A tiny (923 Bytes), efficient and reliable HMAC-MD5 implementation for JavaScript.",
   "author": "bddjr",
   "license": "Unlicense",
   "type": "module",
@@ -63,7 +63,7 @@
     "typescript": "^7.0.2"
   },
   "scripts": {
-    "build": "tsc && node scripts/build.mjs && es-check es2016 --module --checkFeatures main.js browser.min.js",
+    "build": "tsc && node scripts/build.mjs && es-check es2026 --module --checkFeatures main.js browser.min.js",
     "build:unchanged": "node scripts/build-unchanged.mjs",
     "test": "pnpm build && pnpm test:only",
     "test:only": "node scripts/test.mjs && node scripts/test-513MiB.mjs",