SHA-1 for WebAssembly
WebAssembly port of RustCrypto’s SHA-1, a Rust implementations of SHA-1 hashing.
npm i @hazae41/morax
Next.js CodeSandbox 🪣 • Deno CodeSandbox 🪣 • Node CodeSandbox 🪣
Use case
This WebAssembly module is useful when you want to use SHA-1 incrementially, as WebCrypto doesn’t support incremental hashing, and want good performances.
Performances | Incremental hashing | |
---|---|---|
Morax | ⭐️⭐️⭐️⭐️ | ✅ |
WebCrypto | ⭐️⭐️⭐️⭐️⭐️ | ❌ |
JavaScript | ⭐️⭐️⭐️ | ✅ |
Usage
import * as Morax from "@hazae41/morax";
import { Sha1Hasher } from "@hazae41/morax";
// Wait for WASM to load
Morax.initSyncBundledOnce()
// Create a hash
const hasher = new Sha1Hasher()
// Data to be hashed
const hello = new TextEncoder().encode("Hello World")
// Update the hash with your data
hasher.update(hello)
// Grab the digest (20 bytes)
const digest = hasher.finalize()
// Update the hash another time
hasher.update(hello)
// Grab the digest (20 bytes)
const digest2 = hasher.finalize()
// digest !== digest2
console.log(digest)
console.log(digest2)
Unreproducible building
You need to install Rust
Then, install wasm-pack
cargo install wasm-pack
Finally, do a clean install and build
npm ci && npm run build
Reproducible building
You can build the exact same bytecode using Docker, just be sure you’re on a linux/amd64
host
docker compose up --build
Then check that all the files are the same using git status
git status --porcelain
If the output is empty then the bytecode is the same as the one I commited
Automated checks
Each time I commit to the repository, the GitHub’s CI does the following:
- Clone the repository
- Reproduce the build using
docker compose up --build
- Throw an error if the
git status --porcelain
output is not empty
Each time I release a new version tag on GitHub, the GitHub’s CI does the following:
- Clone the repository
- Do not reproduce the build, as it’s already checked by the task above
- Throw an error if there is a
npm diff
between the cloned repository and the same version tag on NPM
If a version is present on NPM but not on GitHub, do not use!