MD5

Author: lpil

CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## v1.2.0 - 2024-02-15
+
+- Added the MD5 hash algorithm. This algorithm is broken and  not recommended
+  for security purposes, but may be useful for interoperability with systems
+  that use MD5.
+
 ## v1.1.0 - 2024-02-15
 
 - This library now supports the JavaScript target too.

src/gleam/crypto.gleam

@@ -24,6 +24,10 @@ pub type HashAlgorithm {
   Sha256
   Sha384
   Sha512
+  /// The MD5 hash algorithm is considered weak and should not be used for
+  /// security purposes. It may still be useful for non-security purposes or for
+  /// compatibility with existing systems.
+  Md5
 }
 
 /// Computes a digest of the input bit string.
@@ -89,6 +93,7 @@ fn signing_input(digest_type: HashAlgorithm, message: BitArray) -> String {
     Sha256 -> "HS256"
     Sha384 -> "HS384"
     Sha512 -> "HS512"
+    Md5 -> "Md5"
   }
   string.concat([
     bit_array.base64_url_encode(<<protected:utf8>>, False),

src/gleam_crypto_ffi.mjs

@@ -1,5 +1,5 @@
 import { BitArray } from "./gleam.mjs";
-import { Sha224, Sha256, Sha384, Sha512 } from "./gleam/crypto.mjs";
+import { Sha224, Sha256, Sha384, Sha512, Md5 } from "./gleam/crypto.mjs";
 import * as crypto from "node:crypto";
 
 function webCrypto() {
@@ -18,6 +18,8 @@ function algorithmName(algorithm) {
     return "sha384";
   } else if (algorithm instanceof Sha512) {
     return "sha512";
+  } else if (algorithm instanceof Md5) {
+    return "md5";
   } else {
     throw new Error("Unsupported algorithm");
   }

test/gleam/crypto_test.gleam

@@ -45,6 +45,13 @@ pub fn hash_sha512_test() {
   >>)
 }
 
+pub fn hash_md5_test() {
+  crypto.hash(crypto.Md5, <<"hi":utf8>>)
+  |> should.equal(<<
+    73, 246, 138, 92, 132, 147, 236, 44, 11, 244, 137, 130, 28, 33, 252, 59,
+  >>)
+}
+
 pub fn hmac_sha256_test() {
   <<"Aladin":utf8>>
   |> crypto.hmac(crypto.Sha256, <<"secret":utf8>>)
@@ -84,6 +91,14 @@ pub fn hmac_sha512_test() {
   >>)
 }
 
+pub fn hmac_md5_test() {
+  <<"Aladin":utf8>>
+  |> crypto.hmac(crypto.Md5, <<"secret":utf8>>)
+  |> should.equal(<<
+    252, 36, 147, 158, 191, 93, 158, 10, 120, 217, 237, 157, 107, 233, 188, 139,
+  >>)
+}
+
 pub fn secure_compare1_test() {
   crypto.secure_compare(
     bit_array.from_string("ab"),