MD5: Cryptographic Library for Lua

MD5
Cryptographic Library for Lua

## Introduction

MD5 offers basic cryptographic facilities for Lua 5.X: a hash (digest) function, a pair crypt/decrypt based on MD5 and CFB, and a pair crypt/decrypt based on DES with 56-bit keys.

MD5 is free software and uses the same license as Lua (MIT).

## Building

If you are using Unix MD5 offers a Makefile and a separate configuration file, `config`, which should be edited to suit the particularities of the target platform before running `make`. The file has some definitions like paths to the external libraries, compiler options and the like. One important definition is the Lua version, which is not obtained from the installed software.

If you want to build MD5 on Windows MD5 offers the equivalent `config.win` and `Makefile.win` files to be used with Microsoft Visual Studio 2005.

## Installation

The easiest way to install MD5 is to use LuaRocks:

    luarocks install md5

If you prefer to install the files manually and are using Unix, the build generates two compiled binary files, `core.so` and `des56.so`. The first should be copied to a directory called `md5` in your C path. Just copy the second to a directory in your Lua C path.

In both Unix and Windows systems the file `md5.lua` should be copied to a directory in your Lua path.

## Reference

### Lua API

All MD5-based functions are registered inside `md5` module.

md5.sum (message)
  Computes the MD5 message-digest of the string `message`. This function takes as input a message of arbitrary length and content and returns as output a 128-bit "fingerprint" (or "message digest") of the input.
  The output is formatted as a binary string with 16 characters. It is conjectured that it is computationally infeasible to produce two messages having the same message digest, or to produce any message having a given pre-specified target message digest. (see RFC 1321)
md5.sumhexa (message)
  Similar to `md5.sum`, but returns its value as a string of 32 hexadecimal digits.
md5.crypt (message, key [,seed])
  Encrypts a string, using MD5 in CFB (Cipher-feedback mode). `message` is an arbitrary binary string to be encrypted. `key` is an arbitrary binary string to be used as a key. `seed` is an arbitrary binary string to be used as a seed; Returns the cyphertext (as a binary string).
  If no seed is provided, the function uses the result of `os.time()` as a seed. It is recommended that you use different seeds for each message; the seed itself is not private, and should contain no private data, because it goes plain in the beginning of the encrypted message.
  The length of the cyphertext is the length of the message plus the length of the seed plus one.
  Note that MD5 based encryption should not be considered a strong solution. MD5 collision can cause to messages with different keys and the same seed to encrypt to the same value, which can then be decrypted with either key. The bigger the key the lesser the chance of this happening. More details about the weaknesses involved can be found here.
md5.decrypt (message, key)
  Decrypts a string. The input `message` must be the result of a previous call to `crypt`. For any `msg`, `key`, and `seed`, we have that

      md5.decrypt(md5.crypt(msg, key, seed), key) == msg

md5.exor (s1, s2)
  Does a bit-a-bit exclusive or of strings `s1` and `s2`. Both strings must have the same length, which will be also the length of the resulting string.

The DES-based functions are registered inside `des56` module.

des56.crypt (message, key)
  Encrypts a string, using DES with a 56-bit key. `message` is an arbitrary binary string to be encrypted. `key` is an 8-byte binary string to be used as a key. Returns the cyphertext (as a binary string).
des56.decrypt (message, key)
  Decrypts a string. The input `message` must be the result of a previous call to `des56.crypt`. For any `msg` and `key`, we have that

      des56.decrypt(des56.crypt(msg, key), key) == msg

### C API

The following functions are declared in `md5.h`

int luaopen_md5_core (lua_State *L)
  Opens the library and registers the "md5" Lua functions in the given state.
void md5 (const char *message, long len, char *output)
  Computes the MD5 message-digest of `message`. `len` is the length of `message`. `output` is a buffer that receives the result; it must have at least 16 bytes (128 bits).

The following function is declared in `ldes56.h`

int luaopen_des56 (lua_State *L)
  Opens the library and registers the "des56" Lua functions in the given state.

Valid XHTML 1.0!