100 lines
2.5 KiB
JavaScript
100 lines
2.5 KiB
JavaScript
|
|
|||
|
|
// 挂载到 window 对象的方法
|
|||
|
|
window.passwordUtils = {
|
|||
|
|
/**
|
|||
|
|
* 哈希密码（返回 Promise）
|
|||
|
|
* @param {string} password - 明文密码
|
|||
|
|
* @returns {Promise<string>} Base64 格式的盐值+哈希值
|
|||
|
|
*/
|
|||
|
|
hashPassword: async function(password) {
|
|||
|
|
const encoder = new TextEncoder();
|
|||
|
|
|
|||
|
|
// 生成随机盐值 (16字节)
|
|||
|
|
const salt = crypto.getRandomValues(new Uint8Array(16));
|
|||
|
|
|
|||
|
|
// 配置 PBKDF2 参数
|
|||
|
|
const keyMaterial = await crypto.subtle.importKey(
|
|||
|
|
'raw',
|
|||
|
|
encoder.encode(password),
|
|||
|
|
{ name: 'PBKDF2' },
|
|||
|
|
false,
|
|||
|
|
['deriveBits']
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 生成哈希
|
|||
|
|
const derivedKey = await crypto.subtle.deriveBits(
|
|||
|
|
{
|
|||
|
|
name: 'PBKDF2',
|
|||
|
|
salt: salt,
|
|||
|
|
iterations: 100000,
|
|||
|
|
hash: 'SHA-256'
|
|||
|
|
},
|
|||
|
|
keyMaterial,
|
|||
|
|
256 // 输出长度
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 合并盐值+哈希值并转为 Base64
|
|||
|
|
const hashArray = new Uint8Array(derivedKey);
|
|||
|
|
const combined = new Uint8Array(salt.length + hashArray.length);
|
|||
|
|
combined.set(salt);
|
|||
|
|
combined.set(hashArray, salt.length);
|
|||
|
|
|
|||
|
|
return btoa(String.fromCharCode(...combined));
|
|||
|
|
},
|
|||
|
|
|
|||
|
|
/**
|
|||
|
|
* 验证密码（返回 Promise）
|
|||
|
|
* @param {string} password - 待验证密码
|
|||
|
|
* @param {string} storedHash - 存储的 Base64 哈希值
|
|||
|
|
* @returns {Promise<boolean>} 是否匹配
|
|||
|
|
*/
|
|||
|
|
verifyPassword: async function(password, storedHash) {
|
|||
|
|
const encoder = new TextEncoder();
|
|||
|
|
|
|||
|
|
// 解码 Base64 获取盐值和原哈希
|
|||
|
|
const decoded = Uint8Array.from(atob(storedHash), c => c.charCodeAt(0));
|
|||
|
|
const salt = decoded.slice(0, 16);
|
|||
|
|
const originalHash = decoded.slice(16);
|
|||
|
|
|
|||
|
|
// 重新计算哈希
|
|||
|
|
const keyMaterial = await crypto.subtle.importKey(
|
|||
|
|
'raw',
|
|||
|
|
encoder.encode(password),
|
|||
|
|
{ name: 'PBKDF2' },
|
|||
|
|
false,
|
|||
|
|
['deriveBits']
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
const newHash = await crypto.subtle.deriveBits(
|
|||
|
|
{
|
|||
|
|
name: 'PBKDF2',
|
|||
|
|
salt: salt,
|
|||
|
|
iterations: 100000,
|
|||
|
|
hash: 'SHA-256'
|
|||
|
|
},
|
|||
|
|
keyMaterial,
|
|||
|
|
256
|
|||
|
|
);
|
|||
|
|
|
|||
|
|
// 比较哈希值
|
|||
|
|
const newHashArray = new Uint8Array(newHash);
|
|||
|
|
return newHashArray.length === originalHash.length &&
|
|||
|
|
newHashArray.every((val, i) => val === originalHash[i]);
|
|||
|
|
}
|
|||
|
|
};
|
|||
|
|
|
|||
|
|
// 控制台测试示例（可直接复制到控制台）
|
|||
|
|
/*
|
|||
|
|
(async () => {
|
|||
|
|
// 哈希测试
|
|||
|
|
const hash = await window.passwordUtils.hashPassword('mypassword');
|
|||
|
|
console.log('Hashed:', hash);
|
|||
|
|
|
|||
|
|
// 验证测试
|
|||
|
|
const isValid = await window.passwordUtils.verifyPassword('mypassword', hash);
|
|||
|
|
console.log('Verify result:', isValid); // 应输出 true
|
|||
|
|
|
|||
|
|
const isInvalid = await window.passwordUtils.verifyPassword('wrongpass', hash);
|
|||
|
|
console.log('Wrong password test:', isInvalid); // 应输出 false
|
|||
|
|
})();
|
|||
|
|
*/
|