713 lines
33 KiB
JavaScript
713 lines
33 KiB
JavaScript
|
'use strict';
|
|||
|
|
|
|||
|
|
Object.defineProperty(exports, '__esModule', { value: true });
|
|||
|
|
|
|||
|
|
var bigintModArith = require('bigint-mod-arith');
|
|||
|
|
|
|||
|
|
function fromBuffer(buf) {
|
|||
|
|
let ret = 0n;
|
|||
|
|
for (const i of buf.values()) {
|
|||
|
|
const bi = BigInt(i);
|
|||
|
|
ret = (ret << BigInt(8)) + bi;
|
|||
|
|
}
|
|||
|
|
return ret;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* Secure random bytes for both node and browsers. Node version uses crypto.randomBytes() and browser one self.crypto.getRandomValues()
|
|||
|
|
*
|
|||
|
|
* @param byteLength - The desired number of random bytes
|
|||
|
|
* @param forceLength - If we want to force the output to have a bit length of 8*byteLength. It basically forces the msb to be 1
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* byteLength MUST be > 0
|
|||
|
|
*
|
|||
|
|
* @returns A promise that resolves to a UInt8Array/Buffer (Browser/Node.js) filled with cryptographically secure random bytes
|
|||
|
|
*/
|
|||
|
|
function randBytes(byteLength, forceLength = false) {
|
|||
|
|
if (byteLength < 1)
|
|||
|
|
throw new RangeError('byteLength MUST be > 0');
|
|||
|
|
return new Promise(function (resolve, reject) {
|
|||
|
|
{
|
|||
|
|
const crypto = require('crypto'); // eslint-disable-line
|
|||
|
|
crypto.randomBytes(byteLength, function (err, buf) {
|
|||
|
|
/* istanbul ignore if */
|
|||
|
|
if (err !== null)
|
|||
|
|
reject(err);
|
|||
|
|
// If fixed length is required we put the first bit to 1 -> to get the necessary bitLength
|
|||
|
|
if (forceLength)
|
|||
|
|
buf[0] = buf[0] | 128;
|
|||
|
|
resolve(buf);
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
/**
|
|||
|
|
* Secure random bytes for both node and browsers. Node version uses crypto.randomFill() and browser one self.crypto.getRandomValues()
|
|||
|
|
*
|
|||
|
|
* @param byteLength - The desired number of random bytes
|
|||
|
|
* @param forceLength - If we want to force the output to have a bit length of 8*byteLength. It basically forces the msb to be 1
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* byteLength MUST be > 0
|
|||
|
|
*
|
|||
|
|
* @returns A UInt8Array/Buffer (Browser/Node.js) filled with cryptographically secure random bytes
|
|||
|
|
*/
|
|||
|
|
function randBytesSync(byteLength, forceLength = false) {
|
|||
|
|
if (byteLength < 1)
|
|||
|
|
throw new RangeError('byteLength MUST be > 0');
|
|||
|
|
/* eslint-disable no-lone-blocks */
|
|||
|
|
{ // node
|
|||
|
|
const crypto = require('crypto'); // eslint-disable-line
|
|||
|
|
const buf = crypto.randomBytes(byteLength);
|
|||
|
|
// If fixed length is required we put the first bit to 1 -> to get the necessary bitLength
|
|||
|
|
if (forceLength)
|
|||
|
|
buf[0] = buf[0] | 128;
|
|||
|
|
return buf;
|
|||
|
|
}
|
|||
|
|
/* eslint-enable no-lone-blocks */
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* Secure random bits for both node and browsers. Node version uses crypto.randomFill() and browser one self.crypto.getRandomValues()
|
|||
|
|
*
|
|||
|
|
* @param bitLength - The desired number of random bits
|
|||
|
|
* @param forceLength - If we want to force the output to have a specific bit length. It basically forces the msb to be 1
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* bitLength MUST be > 0
|
|||
|
|
*
|
|||
|
|
* @returns A Promise that resolves to a UInt8Array/Buffer (Browser/Node.js) filled with cryptographically secure random bits
|
|||
|
|
*/
|
|||
|
|
function randBits(bitLength, forceLength = false) {
|
|||
|
|
if (bitLength < 1)
|
|||
|
|
throw new RangeError('bitLength MUST be > 0');
|
|||
|
|
const byteLength = Math.ceil(bitLength / 8);
|
|||
|
|
const bitLengthMod8 = bitLength % 8;
|
|||
|
|
return new Promise((resolve, reject) => {
|
|||
|
|
randBytes(byteLength, false).then(function (rndBytes) {
|
|||
|
|
if (bitLengthMod8 !== 0) {
|
|||
|
|
// Fill with 0's the extra bits
|
|||
|
|
rndBytes[0] = rndBytes[0] & (2 ** bitLengthMod8 - 1);
|
|||
|
|
}
|
|||
|
|
if (forceLength) {
|
|||
|
|
const mask = (bitLengthMod8 !== 0) ? 2 ** (bitLengthMod8 - 1) : 128;
|
|||
|
|
rndBytes[0] = rndBytes[0] | mask;
|
|||
|
|
}
|
|||
|
|
resolve(rndBytes);
|
|||
|
|
});
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
/**
|
|||
|
|
* Secure random bits for both node and browsers. Node version uses crypto.randomFill() and browser one self.crypto.getRandomValues()
|
|||
|
|
* @param bitLength - The desired number of random bits
|
|||
|
|
* @param forceLength - If we want to force the output to have a specific bit length. It basically forces the msb to be 1
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* bitLength MUST be > 0
|
|||
|
|
*
|
|||
|
|
* @returns A Uint8Array/Buffer (Browser/Node.js) filled with cryptographically secure random bits
|
|||
|
|
*/
|
|||
|
|
function randBitsSync(bitLength, forceLength = false) {
|
|||
|
|
if (bitLength < 1)
|
|||
|
|
throw new RangeError('bitLength MUST be > 0');
|
|||
|
|
const byteLength = Math.ceil(bitLength / 8);
|
|||
|
|
const rndBytes = randBytesSync(byteLength, false);
|
|||
|
|
const bitLengthMod8 = bitLength % 8;
|
|||
|
|
if (bitLengthMod8 !== 0) {
|
|||
|
|
// Fill with 0's the extra bits
|
|||
|
|
rndBytes[0] = rndBytes[0] & (2 ** bitLengthMod8 - 1);
|
|||
|
|
}
|
|||
|
|
if (forceLength) {
|
|||
|
|
const mask = (bitLengthMod8 !== 0) ? 2 ** (bitLengthMod8 - 1) : 128;
|
|||
|
|
rndBytes[0] = rndBytes[0] | mask;
|
|||
|
|
}
|
|||
|
|
return rndBytes;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* Returns a cryptographically secure random integer between [min,max]. Both numbers must be >=0
|
|||
|
|
* @param max Returned value will be <= max
|
|||
|
|
* @param min Returned value will be >= min
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* Arguments MUST be: max > 0 && min >=0 && max > min
|
|||
|
|
*
|
|||
|
|
* @returns A cryptographically secure random bigint between [min,max]
|
|||
|
|
*/
|
|||
|
|
function randBetween(max, min = 1n) {
|
|||
|
|
if (max <= 0n || min < 0n || max <= min)
|
|||
|
|
throw new RangeError('Arguments MUST be: max > 0 && min >=0 && max > min');
|
|||
|
|
const interval = max - min;
|
|||
|
|
const bitLen = bigintModArith.bitLength(interval);
|
|||
|
|
let rnd;
|
|||
|
|
do {
|
|||
|
|
const buf = randBitsSync(bitLen);
|
|||
|
|
rnd = fromBuffer(buf);
|
|||
|
|
} while (rnd > interval);
|
|||
|
|
return rnd + min;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
let _useWorkers = false; // The following is just to check whether we can use workers
|
|||
|
|
/* eslint-disable no-lone-blocks */
|
|||
|
|
{ // Node.js
|
|||
|
|
try {
|
|||
|
|
require.resolve('worker_threads');
|
|||
|
|
_useWorkers = true;
|
|||
|
|
}
|
|||
|
|
catch (e) {
|
|||
|
|
/* istanbul ignore next */
|
|||
|
|
console.log(`[bigint-crypto-utils] WARNING:
|
|||
|
|
This node version doesn't support worker_threads. You should enable them in order to greatly speedup the generation of big prime numbers.
|
|||
|
|
· With Node >=11 it is enabled by default (consider upgrading).
|
|||
|
|
· With Node 10, starting with 10.5.0, you can enable worker_threads at runtime executing node --experimental-worker `);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* The test first tries if any of the first 250 small primes are a factor of the input number and then passes several
|
|||
|
|
* iterations of Miller-Rabin Probabilistic Primality Test (FIPS 186-4 C.3.1)
|
|||
|
|
*
|
|||
|
|
* @param w - A positive integer to be tested for primality
|
|||
|
|
* @param iterations - The number of iterations for the primality test. The value shall be consistent with Table C.1, C.2 or C.3
|
|||
|
|
* @param disableWorkers - Disable the use of workers for the primality test
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* w MUST be >= 0
|
|||
|
|
*
|
|||
|
|
* @returns A promise that resolves to a boolean that is either true (a probably prime number) or false (definitely composite)
|
|||
|
|
*/
|
|||
|
|
function isProbablyPrime(w, iterations = 16, disableWorkers = false) {
|
|||
|
|
if (typeof w === 'number') {
|
|||
|
|
w = BigInt(w);
|
|||
|
|
}
|
|||
|
|
if (w < 0n)
|
|||
|
|
throw RangeError('w MUST be >= 0');
|
|||
|
|
{ // Node.js
|
|||
|
|
/* istanbul ignore else */
|
|||
|
|
if (!disableWorkers && _useWorkers) {
|
|||
|
|
const { Worker } = require('worker_threads'); // eslint-disable-line
|
|||
|
|
return new Promise((resolve, reject) => {
|
|||
|
|
const worker = new Worker(__filename);
|
|||
|
|
worker.on('message', (data) => {
|
|||
|
|
worker.terminate();
|
|||
|
|
resolve(data.isPrime);
|
|||
|
|
});
|
|||
|
|
worker.on('error', reject);
|
|||
|
|
const msg = {
|
|||
|
|
rnd: w,
|
|||
|
|
iterations: iterations,
|
|||
|
|
id: 0
|
|||
|
|
};
|
|||
|
|
worker.postMessage(msg);
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
else {
|
|||
|
|
return new Promise((resolve) => {
|
|||
|
|
resolve(_isProbablyPrime(w, iterations));
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
function _isProbablyPrime(w, iterations = 16) {
|
|||
|
|
/*
|
|||
|
|
PREFILTERING. Even values but 2 are not primes, so don't test.
|
|||
|
|
1 is not a prime and the M-R algorithm needs w>1.
|
|||
|
|
*/
|
|||
|
|
if (w === 2n)
|
|||
|
|
return true;
|
|||
|
|
else if ((w & 1n) === 0n || w === 1n)
|
|||
|
|
return false;
|
|||
|
|
/*
|
|||
|
|
Test if any of the first 250 small primes are a factor of w. 2 is not tested because it was already tested above.
|
|||
|
|
*/
|
|||
|
|
const firstPrimes = [
|
|||
|
|
3n,
|
|||
|
|
5n,
|
|||
|
|
7n,
|
|||
|
|
11n,
|
|||
|
|
13n,
|
|||
|
|
17n,
|
|||
|
|
19n,
|
|||
|
|
23n,
|
|||
|
|
29n,
|
|||
|
|
31n,
|
|||
|
|
37n,
|
|||
|
|
41n,
|
|||
|
|
43n,
|
|||
|
|
47n,
|
|||
|
|
53n,
|
|||
|
|
59n,
|
|||
|
|
61n,
|
|||
|
|
67n,
|
|||
|
|
71n,
|
|||
|
|
73n,
|
|||
|
|
79n,
|
|||
|
|
83n,
|
|||
|
|
89n,
|
|||
|
|
97n,
|
|||
|
|
101n,
|
|||
|
|
103n,
|
|||
|
|
107n,
|
|||
|
|
109n,
|
|||
|
|
113n,
|
|||
|
|
127n,
|
|||
|
|
131n,
|
|||
|
|
137n,
|
|||
|
|
139n,
|
|||
|
|
149n,
|
|||
|
|
151n,
|
|||
|
|
157n,
|
|||
|
|
163n,
|
|||
|
|
167n,
|
|||
|
|
173n,
|
|||
|
|
179n,
|
|||
|
|
181n,
|
|||
|
|
191n,
|
|||
|
|
193n,
|
|||
|
|
197n,
|
|||
|
|
199n,
|
|||
|
|
211n,
|
|||
|
|
223n,
|
|||
|
|
227n,
|
|||
|
|
229n,
|
|||
|
|
233n,
|
|||
|
|
239n,
|
|||
|
|
241n,
|
|||
|
|
251n,
|
|||
|
|
257n,
|
|||
|
|
263n,
|
|||
|
|
269n,
|
|||
|
|
271n,
|
|||
|
|
277n,
|
|||
|
|
281n,
|
|||
|
|
283n,
|
|||
|
|
293n,
|
|||
|
|
307n,
|
|||
|
|
311n,
|
|||
|
|
313n,
|
|||
|
|
317n,
|
|||
|
|
331n,
|
|||
|
|
337n,
|
|||
|
|
347n,
|
|||
|
|
349n,
|
|||
|
|
353n,
|
|||
|
|
359n,
|
|||
|
|
367n,
|
|||
|
|
373n,
|
|||
|
|
379n,
|
|||
|
|
383n,
|
|||
|
|
389n,
|
|||
|
|
397n,
|
|||
|
|
401n,
|
|||
|
|
409n,
|
|||
|
|
419n,
|
|||
|
|
421n,
|
|||
|
|
431n,
|
|||
|
|
433n,
|
|||
|
|
439n,
|
|||
|
|
443n,
|
|||
|
|
449n,
|
|||
|
|
457n,
|
|||
|
|
461n,
|
|||
|
|
463n,
|
|||
|
|
467n,
|
|||
|
|
479n,
|
|||
|
|
487n,
|
|||
|
|
491n,
|
|||
|
|
499n,
|
|||
|
|
503n,
|
|||
|
|
509n,
|
|||
|
|
521n,
|
|||
|
|
523n,
|
|||
|
|
541n,
|
|||
|
|
547n,
|
|||
|
|
557n,
|
|||
|
|
563n,
|
|||
|
|
569n,
|
|||
|
|
571n,
|
|||
|
|
577n,
|
|||
|
|
587n,
|
|||
|
|
593n,
|
|||
|
|
599n,
|
|||
|
|
601n,
|
|||
|
|
607n,
|
|||
|
|
613n,
|
|||
|
|
617n,
|
|||
|
|
619n,
|
|||
|
|
631n,
|
|||
|
|
641n,
|
|||
|
|
643n,
|
|||
|
|
647n,
|
|||
|
|
653n,
|
|||
|
|
659n,
|
|||
|
|
661n,
|
|||
|
|
673n,
|
|||
|
|
677n,
|
|||
|
|
683n,
|
|||
|
|
691n,
|
|||
|
|
701n,
|
|||
|
|
709n,
|
|||
|
|
719n,
|
|||
|
|
727n,
|
|||
|
|
733n,
|
|||
|
|
739n,
|
|||
|
|
743n,
|
|||
|
|
751n,
|
|||
|
|
757n,
|
|||
|
|
761n,
|
|||
|
|
769n,
|
|||
|
|
773n,
|
|||
|
|
787n,
|
|||
|
|
797n,
|
|||
|
|
809n,
|
|||
|
|
811n,
|
|||
|
|
821n,
|
|||
|
|
823n,
|
|||
|
|
827n,
|
|||
|
|
829n,
|
|||
|
|
839n,
|
|||
|
|
853n,
|
|||
|
|
857n,
|
|||
|
|
859n,
|
|||
|
|
863n,
|
|||
|
|
877n,
|
|||
|
|
881n,
|
|||
|
|
883n,
|
|||
|
|
887n,
|
|||
|
|
907n,
|
|||
|
|
911n,
|
|||
|
|
919n,
|
|||
|
|
929n,
|
|||
|
|
937n,
|
|||
|
|
941n,
|
|||
|
|
947n,
|
|||
|
|
953n,
|
|||
|
|
967n,
|
|||
|
|
971n,
|
|||
|
|
977n,
|
|||
|
|
983n,
|
|||
|
|
991n,
|
|||
|
|
997n,
|
|||
|
|
1009n,
|
|||
|
|
1013n,
|
|||
|
|
1019n,
|
|||
|
|
1021n,
|
|||
|
|
1031n,
|
|||
|
|
1033n,
|
|||
|
|
1039n,
|
|||
|
|
1049n,
|
|||
|
|
1051n,
|
|||
|
|
1061n,
|
|||
|
|
1063n,
|
|||
|
|
1069n,
|
|||
|
|
1087n,
|
|||
|
|
1091n,
|
|||
|
|
1093n,
|
|||
|
|
1097n,
|
|||
|
|
1103n,
|
|||
|
|
1109n,
|
|||
|
|
1117n,
|
|||
|
|
1123n,
|
|||
|
|
1129n,
|
|||
|
|
1151n,
|
|||
|
|
1153n,
|
|||
|
|
1163n,
|
|||
|
|
1171n,
|
|||
|
|
1181n,
|
|||
|
|
1187n,
|
|||
|
|
1193n,
|
|||
|
|
1201n,
|
|||
|
|
1213n,
|
|||
|
|
1217n,
|
|||
|
|
1223n,
|
|||
|
|
1229n,
|
|||
|
|
1231n,
|
|||
|
|
1237n,
|
|||
|
|
1249n,
|
|||
|
|
1259n,
|
|||
|
|
1277n,
|
|||
|
|
1279n,
|
|||
|
|
1283n,
|
|||
|
|
1289n,
|
|||
|
|
1291n,
|
|||
|
|
1297n,
|
|||
|
|
1301n,
|
|||
|
|
1303n,
|
|||
|
|
1307n,
|
|||
|
|
1319n,
|
|||
|
|
1321n,
|
|||
|
|
1327n,
|
|||
|
|
1361n,
|
|||
|
|
1367n,
|
|||
|
|
1373n,
|
|||
|
|
1381n,
|
|||
|
|
1399n,
|
|||
|
|
1409n,
|
|||
|
|
1423n,
|
|||
|
|
1427n,
|
|||
|
|
1429n,
|
|||
|
|
1433n,
|
|||
|
|
1439n,
|
|||
|
|
1447n,
|
|||
|
|
1451n,
|
|||
|
|
1453n,
|
|||
|
|
1459n,
|
|||
|
|
1471n,
|
|||
|
|
1481n,
|
|||
|
|
1483n,
|
|||
|
|
1487n,
|
|||
|
|
1489n,
|
|||
|
|
1493n,
|
|||
|
|
1499n,
|
|||
|
|
1511n,
|
|||
|
|
1523n,
|
|||
|
|
1531n,
|
|||
|
|
1543n,
|
|||
|
|
1549n,
|
|||
|
|
1553n,
|
|||
|
|
1559n,
|
|||
|
|
1567n,
|
|||
|
|
1571n,
|
|||
|
|
1579n,
|
|||
|
|
1583n,
|
|||
|
|
1597n
|
|||
|
|
];
|
|||
|
|
for (let i = 0; i < firstPrimes.length && (firstPrimes[i] <= w); i++) {
|
|||
|
|
const p = firstPrimes[i];
|
|||
|
|
if (w === p)
|
|||
|
|
return true;
|
|||
|
|
else if (w % p === 0n)
|
|||
|
|
return false;
|
|||
|
|
}
|
|||
|
|
/*
|
|||
|
|
1. Let a be the largest integer such that 2**a divides w−1.
|
|||
|
|
2. m = (w−1) / 2**a.
|
|||
|
|
3. wlen = len (w).
|
|||
|
|
4. For i = 1 to iterations do
|
|||
|
|
4.1 Obtain a string b of wlen bits from an RBG.
|
|||
|
|
Comment: Ensure that 1 < b < w−1.
|
|||
|
|
4.2 If ((b ≤ 1) or (b ≥ w−1)), then go to step 4.1.
|
|||
|
|
4.3 z = b**m mod w.
|
|||
|
|
4.4 If ((z = 1) or (z = w − 1)), then go to step 4.7.
|
|||
|
|
4.5 For j = 1 to a − 1 do.
|
|||
|
|
4.5.1 z = z**2 mod w.
|
|||
|
|
4.5.2 If (z = w−1), then go to step 4.7.
|
|||
|
|
4.5.3 If (z = 1), then go to step 4.6.
|
|||
|
|
4.6 Return COMPOSITE.
|
|||
|
|
4.7 Continue.
|
|||
|
|
Comment: Increment i for the do-loop in step 4.
|
|||
|
|
5. Return PROBABLY PRIME.
|
|||
|
|
*/
|
|||
|
|
let a = 0n;
|
|||
|
|
const d = w - 1n;
|
|||
|
|
let aux = d;
|
|||
|
|
while (aux % 2n === 0n) {
|
|||
|
|
aux /= 2n;
|
|||
|
|
++a;
|
|||
|
|
}
|
|||
|
|
const m = d / (2n ** a);
|
|||
|
|
do {
|
|||
|
|
const b = randBetween(d, 2n);
|
|||
|
|
let z = bigintModArith.modPow(b, m, w);
|
|||
|
|
if (z === 1n || z === d)
|
|||
|
|
continue;
|
|||
|
|
let j = 1;
|
|||
|
|
while (j < a) {
|
|||
|
|
z = bigintModArith.modPow(z, 2n, w);
|
|||
|
|
if (z === d)
|
|||
|
|
break;
|
|||
|
|
if (z === 1n)
|
|||
|
|
return false;
|
|||
|
|
j++;
|
|||
|
|
}
|
|||
|
|
if (z !== d)
|
|||
|
|
return false;
|
|||
|
|
} while (--iterations !== 0);
|
|||
|
|
return true;
|
|||
|
|
}
|
|||
|
|
if (_useWorkers) { // node.js with support for workers
|
|||
|
|
const { parentPort, isMainThread } = require('worker_threads'); // eslint-disable-line
|
|||
|
|
const isWorker = !isMainThread;
|
|||
|
|
/* istanbul ignore if */
|
|||
|
|
if (isWorker) { // worker
|
|||
|
|
parentPort.on('message', function (data) {
|
|||
|
|
const isPrime = _isProbablyPrime(data.rnd, data.iterations);
|
|||
|
|
const msg = {
|
|||
|
|
isPrime: isPrime,
|
|||
|
|
value: data.rnd,
|
|||
|
|
id: data.id
|
|||
|
|
};
|
|||
|
|
parentPort.postMessage(msg);
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* A probably-prime (Miller-Rabin), cryptographically-secure, random-number generator.
|
|||
|
|
* The browser version uses web workers to parallelise prime look up. Therefore, it does not lock the UI
|
|||
|
|
* main process, and it can be much faster (if several cores or cpu are available).
|
|||
|
|
* The node version can also use worker_threads if they are available (enabled by default with Node 11 and
|
|||
|
|
* and can be enabled at runtime executing node --experimental-worker with node >=10.5.0).
|
|||
|
|
*
|
|||
|
|
* @param bitLength - The required bit length for the generated prime
|
|||
|
|
* @param iterations - The number of iterations for the Miller-Rabin Probabilistic Primality Test
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* bitLength MUST be > 0
|
|||
|
|
*
|
|||
|
|
* @returns A promise that resolves to a bigint probable prime of bitLength bits.
|
|||
|
|
*/
|
|||
|
|
function prime(bitLength, iterations = 16) {
|
|||
|
|
if (bitLength < 1)
|
|||
|
|
throw new RangeError('bitLength MUST be > 0');
|
|||
|
|
/* istanbul ignore if */
|
|||
|
|
if (!_useWorkers) { // If there is no support for workers
|
|||
|
|
let rnd = 0n;
|
|||
|
|
do {
|
|||
|
|
rnd = fromBuffer(randBitsSync(bitLength, true));
|
|||
|
|
} while (!_isProbablyPrime(rnd, iterations));
|
|||
|
|
return new Promise((resolve) => { resolve(rnd); });
|
|||
|
|
}
|
|||
|
|
return new Promise((resolve, reject) => {
|
|||
|
|
const workerList = [];
|
|||
|
|
const _onmessage = (msg, newWorker) => {
|
|||
|
|
if (msg.isPrime) {
|
|||
|
|
// if a prime number has been found, stop all the workers, and return it
|
|||
|
|
for (let j = 0; j < workerList.length; j++) {
|
|||
|
|
workerList[j].terminate();
|
|||
|
|
}
|
|||
|
|
while (workerList.length > 0) {
|
|||
|
|
workerList.pop();
|
|||
|
|
}
|
|||
|
|
resolve(msg.value);
|
|||
|
|
}
|
|||
|
|
else { // if a composite is found, make the worker test another random number
|
|||
|
|
const buf = randBitsSync(bitLength, true);
|
|||
|
|
const rnd = fromBuffer(buf);
|
|||
|
|
try {
|
|||
|
|
const msgToWorker = {
|
|||
|
|
rnd: rnd,
|
|||
|
|
iterations: iterations,
|
|||
|
|
id: msg.id
|
|||
|
|
};
|
|||
|
|
newWorker.postMessage(msgToWorker);
|
|||
|
|
}
|
|||
|
|
catch (error) {
|
|||
|
|
// The worker has already terminated. There is nothing to handle here
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
};
|
|||
|
|
{ // Node.js
|
|||
|
|
const { cpus } = require('os'); // eslint-disable-line
|
|||
|
|
const { Worker } = require('worker_threads'); // eslint-disable-line
|
|||
|
|
for (let i = 0; i < cpus().length - 1; i++) {
|
|||
|
|
const newWorker = new Worker(__filename);
|
|||
|
|
newWorker.on('message', (msg) => _onmessage(msg, newWorker));
|
|||
|
|
workerList.push(newWorker);
|
|||
|
|
}
|
|||
|
|
}
|
|||
|
|
for (let i = 0; i < workerList.length; i++) {
|
|||
|
|
randBits(bitLength, true).then(function (buf) {
|
|||
|
|
const rnd = fromBuffer(buf);
|
|||
|
|
workerList[i].postMessage({
|
|||
|
|
rnd: rnd,
|
|||
|
|
iterations: iterations,
|
|||
|
|
id: i
|
|||
|
|
});
|
|||
|
|
}).catch(reject);
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
}
|
|||
|
|
/**
|
|||
|
|
* A probably-prime (Miller-Rabin), cryptographically-secure, random-number generator.
|
|||
|
|
* The sync version is NOT RECOMMENDED since it won't use workers and thus it'll be slower and may freeze thw window in browser's javascript. Please consider using prime() instead.
|
|||
|
|
*
|
|||
|
|
* @param bitLength - The required bit length for the generated prime
|
|||
|
|
* @param iterations - The number of iterations for the Miller-Rabin Probabilistic Primality Test
|
|||
|
|
*
|
|||
|
|
* @throws {RangeError}
|
|||
|
|
* bitLength MUST be > 0
|
|||
|
|
*
|
|||
|
|
* @returns A bigint probable prime of bitLength bits.
|
|||
|
|
*/
|
|||
|
|
function primeSync(bitLength, iterations = 16) {
|
|||
|
|
if (bitLength < 1)
|
|||
|
|
throw new RangeError('bitLength MUST be > 0');
|
|||
|
|
let rnd = 0n;
|
|||
|
|
do {
|
|||
|
|
rnd = fromBuffer(randBitsSync(bitLength, true));
|
|||
|
|
} while (!_isProbablyPrime(rnd, iterations));
|
|||
|
|
return rnd;
|
|||
|
|
}
|
|||
|
|
|
|||
|
|
Object.defineProperty(exports, 'abs', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.abs;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'bitLength', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.bitLength;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'eGcd', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.eGcd;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'gcd', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.gcd;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'lcm', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.lcm;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'max', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.max;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'min', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.min;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'modInv', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.modInv;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'modPow', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.modPow;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
Object.defineProperty(exports, 'toZn', {
|
|||
|
|
enumerable: true,
|
|||
|
|
get: function () {
|
|||
|
|
return bigintModArith.toZn;
|
|||
|
|
}
|
|||
|
|
});
|
|||
|
|
exports.isProbablyPrime = isProbablyPrime;
|
|||
|
|
exports.prime = prime;
|
|||
|
|
exports.primeSync = primeSync;
|
|||
|
|
exports.randBetween = randBetween;
|
|||
|
|
exports.randBits = randBits;
|
|||
|
|
exports.randBitsSync = randBitsSync;
|
|||
|
|
exports.randBytes = randBytes;
|
|||
|
|
exports.randBytesSync = randBytesSync;
|
|||
|
|
//# sourceMappingURL=data:application/json;charset=utf-8;base64,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
|