[web]implement in-house sha1 hash function (#18651)

* implement in-house sha1 hash function * add comment * add test description Co-authored-by: Antoine Clausse <antoine.clausse@overleaf.com> * add more tests * dedupe test strings and remove unneeded toString calls --------- Co-authored-by: Antoine Clausse <antoine.clausse@overleaf.com> GitOrigin-RevId: aa3f5ab3ff412696c715521381eebf176f503197
2026-11-15 06:33:55 +01:00 · 2024-06-05 08:03:42 +00:00
parent a9cc32e6ed
commit 4101f4efeb
6 changed files with 227 additions and 9 deletions
@@ -0,0 +1,41 @@
+/**
+ * From: https://github.com/pvorb/node-crypt/blob/master/crypt.js
+ * Copyright © 2011, Paul Vorbach. All rights reserved.
+ * Copyright © 2009, Jeff Mott. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without modification,
+ * are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this list of
+ *    conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice, this list of
+ *    conditions and the following disclaimer in the documentation and/or other materials
+ *    provided with the distribution.
+ * 3. Neither the name Crypto-JS nor the names of its contributors may be used to endorse or
+ *    promote products derived from this software without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR
+ * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
+ * AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR
+ * CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
+ * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+ * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
+ * IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT
+ * OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+// Convert a byte array to big-endian 32-bit words
+export function bytesToWords(bytes) {
+  const words = []
+  for (let i = 0, b = 0; i < bytes.length; i++, b += 8)
+    words[b >>> 5] |= bytes[i] << (24 - (b % 32))
+  return words
+}
+
+// Convert big-endian 32-bit words to a byte array
+export function wordsToBytes(words) {
+  const bytes = []
+  for (let b = 0; b < words.length * 32; b += 8)
+    bytes.push((words[b >>> 5] >>> (24 - (b % 32))) & 0xff)
+  return bytes
+}
@@ -0,0 +1,99 @@
+/**
+ * From https://github.com/pvorb/node-sha1/blob/master/sha1.js
+ * Copyright © 2009, Jeff Mott. All rights reserved.
+ * Copyright © 2011, Paul Vorbach. All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without modification,
+ * are permitted provided that the following conditions are met:
+ *
+ * 1. Redistributions of source code must retain the above copyright notice, this
+ *    list of conditions and the following disclaimer.
+ * 2. Redistributions in binary form must reproduce the above copyright notice, this
+ *    list of conditions and the following disclaimer in the documentation and/or
+ *    other materials provided with the distribution.
+ * 3. Neither the name Crypto-JS nor the names of its contributors may be used to
+ *    endorse or promote products derived from this software without specific prior
+ *    written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
+ * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR
+ * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON
+ * ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ */
+
+import { wordsToBytes, bytesToWords } from './crypto'
+
+export function generateSHA1Hash(inputString) {
+  const encoder = new TextEncoder()
+  const uint8Array = encoder.encode(inputString)
+
+  const m = bytesToWords(uint8Array)
+  const l = inputString.length * 8
+  const w = []
+  let H0 = 1732584193
+  let H1 = -271733879
+  let H2 = -1732584194
+  let H3 = 271733878
+  let H4 = -1009589776
+
+  // Padding
+  m[l >> 5] |= 0x80 << (24 - (l % 32))
+  m[(((l + 64) >>> 9) << 4) + 15] = l
+
+  for (let i = 0; i < m.length; i += 16) {
+    const a = H0
+    const b = H1
+    const c = H2
+    const d = H3
+    const e = H4
+
+    for (let j = 0; j < 80; j++) {
+      if (j < 16) w[j] = m[i + j]
+      else {
+        const n = w[j - 3] ^ w[j - 8] ^ w[j - 14] ^ w[j - 16]
+        w[j] = (n << 1) | (n >>> 31)
+      }
+
+      const t =
+        ((H0 << 5) | (H0 >>> 27)) +
+        H4 +
+        (w[j] >>> 0) +
+        (j < 20
+          ? ((H1 & H2) | (~H1 & H3)) + 1518500249
+          : j < 40
+            ? (H1 ^ H2 ^ H3) + 1859775393
+            : j < 60
+              ? ((H1 & H2) | (H1 & H3) | (H2 & H3)) - 1894007588
+              : (H1 ^ H2 ^ H3) - 899497514)
+
+      H4 = H3
+      H3 = H2
+      H2 = (H1 << 30) | (H1 >>> 2)
+      H1 = H0
+      H0 = t
+    }
+
+    H0 += a
+    H1 += b
+    H2 += c
+    H3 += d
+    H4 += e
+  }
+
+  const result = wordsToBytes([H0, H1, H2, H3, H4])
+
+  // Convert array of bytes to a hex string
+  // padStart is used to ensure numbers that are
+  // less than 16 will still be converted into the two-character format
+  // For example:
+  // "5" => "05"
+  // "a" => "0a"
+  // "ff" => "ff"
+  return result.map(b => b.toString(16).padStart(2, '0')).join('')
+}