gnablib

gnablib

A lean, zero dependency library to provide a useful base for your project. Checksums, cryptography, codecs, date-times, error-checking-codes, logging, pseudorandom number generation. The tools you need for any project. Secure build pipeline, provenance signed and typed.

Installation

This module is available through NPM. There are no install scripts, decrease your risk by explicitly preventing (--ignore-scripts)

(pnpm|npm) install gnablib --ignore-scripts

To verify provenance:

npm audit signatures

Details

Augmented Backus-Naur Form /rfc5234

• Operators
• Definition of core rules

Algorithms

• Weighted Random Sampling
• Next power of 2
• Thomson NFA (1968) solver

Checksum/Hash

A checksum; can be used to prevent/identify accidental changes. A hash; maps some data to another, often used for hash tables, or to speed up comparison.

Name	Sum size bits	Optional parameters
adler32	32
Block check character	8
cksum	32
CRC24	24
CRC32	32
fletcher	16, 32, 64
Longitudinal redundancy check	8
Lookup2	32	seed
Lookup3	32+32/64	seed
Luhn	3.5
MD5Sum	128
Murmur3	32	seed
SHA1Sum	160
Spooky v2	128	seed
xxHash	32, 64	seed

Command Line Interface (cli)

• Argument and option parsing
• Foreground, background color (8 color, 213 color, 16M colors)
• Underline, bold, faint, italic, blink, invert, hide, strike-through, overline text styles
• Terminal controls & style (cursor move, screen/line clear)

Codec

• ASCII85
• Base32, zBase32, Base32Hex, Crockford32
• Base64, Base64url, B64
• bfloat16
• Densely Packed Decimal
• Hex
• IEEE754 Binary
• Proquint
• QuotedPrintable
• ROT13, ROT13.5, ROT47
• URI
• UTF8
• uuencode
• UUID
• YEnc

Crypto

Block

• Cipher Block Chaining (CBC)
• Cipher FeedBack (CFB)
• Counter (CTR)
• Electronic CodeBook (ECB)
• Output FeedBack (OFB)

CBC or CTR are recommended by Niels Ferguson and Bruce Schneier. ECB should not be used.

Padding

• ANSI X9.23 / ISO 10126 padding
• ISO 7816-4 padding
• ISO 9797-1 padding 2
• PKCS#7 / PKCS#5 padding
• Zero / Null padding

Symmetric

Name	Block size	Key size	Nonce size	Features
Advanced Encryption Standard (AES)	16	16, 24, 32	0
Ascon-128	8	16	16	AEAD
Ascon-128a	16	16	16	AEAD
Ascon-80pq	8	20	16	AEAD, Resistance to quantum adversary
Blowfish	8	4-56	0
ChaCha20	64	16, 32	12
ChaCha20-Poly1305	64	32	12	AEAD
Rabbit	16	16	0, 8
Salsa20	64	16, 32	8
Salsa20-Poly1305	64	32	12	AEAD
Twofish	16	16, 24, 32	0
XChaCha20	64	32	24
XChaCha20-Poly1305	64	32	24	AEAD
XSalsa20	64	16, 32	24
XSalsa20-Poly1305	64	32	24	AEAD

Secure Hash

Cryptography hash functions that have the properties:

• Finding an input string that matches a hash value (pre-image) is hard
• Finding a pair of messages that generate the same hash value (collision) is hard

Name	Digest sizes	Optional parameters
Ascon-Hash, Ascon-HashA	256	-
Blake	256, 512	salt
Blake2b	8-512, 256, 384, 512	key, salt, personalization
Blake2s	8-256, 224, 256	key, salt, personalization
Keccak	8-512, 224, 256, 384, 512	capacity
MD4†	128†	-
MD5†	128†	-
ParallelHash (128,256)	8-512	block size, customization
RipeMD†	128†, 160†, 256, 320	-
SHA-1†	160†	-
SHA-2	224, 256, 384, 512, 512/224, 512/256	-
SHA-3	224, 256, 384, 512	-
TupleHash (128, 256)	8-512	customization
Whirlpool	512	-

† No longer considered cryptographically safe

Key Derivation Function (KDF)

A cryptographic algorithm that derives one or more secret keys from a secret value. Can be used to stretch keys (make them longer), or obtain a key in a particular format (eg making a key a fixed length)

• HKDF
• PBKDF2 pbkdf2_hmac_sha1, pbkdf2_hmac_sha256, pbkdf2_hmac_sha512

Message Authentication Code (MAC)

Also known as an authentication tag, a short piece of information to authenticate a message. Protect integrity, and authenticity.

Name	Tag Size
CMAC	16 (AES)
HMAC	Depends on hash (Blake, Blake2, cShake, Keccak, MD4, MD5, RipeMD, Sha1, Sha2, Sha3, Shake, Whirlpool)
HopMAC	16 (Kangaroo Twelve)
KMAC	16, 32 (Keccak)
Poly1305	16

EXtendable-Output Function (XOF)

A secure hash that can produce output of any desired length.

Name	Capacities	Optional parameters
Ascon-Xof, Ascon-XofA	256	digest size
cShake	128, 256	digest size, function name, customization
KangarooTwelve	128	digest size, customization
KmacXof	128, 256	digest size, key, customization
ParallelHashXof	128, 256	block size, digest size, customization
Shake	128, 256	digest size
TupleHashXof	128, 256	digest size, customization
TurboSHAKE	128, 256	digest size, customization

DateTime

• Year, Month, Day
• Hour, Minute, Second, Millisecond, Microsecond
• DateTimeLocal, DateTimeUtc, DateOnly, TimeOnly
• Duration, DurationExact
• DateTime*.lt|lte|eq|gt|gte|neq - Compare two date-times
• DateTime*.add|sub - Add or subtract Duration|DurationExact from a date-time
• DateTime*.diff|diffExact - Get the difference between two dates in y/m/d/h/* or d/h/*

Error Correction Codes

• Reed Solomon

Endian

• Big
• Little

Net

• CIDR
• IPv4
• IpTree

Primitive

• Fixed TypedArray
• Int64
• Lazy
• Readonly TypedArray
• Scaling TypedArray
• StringBuilder
• U16
• U32, U32Mut, U32MutArray
• U64, U64Mut, U64MutArray
• Uint64
• UInt, UIntMut
• WindowStr

Extensions:

• Bit
• Int
• String
• Uint8Array

Pseudorandom number generators (PRNG)

• Marsaglia - possible to calculate in your head
• Middle-Square - in practice flawed since the period is often short and will converge towards the same number or loop after repeated times
• MSVC
• RANDU - a famously bad PRNG

RegExp

• RegExp escape string

RunTime

• Configuration (including collecting from environment variables)
• Structured logging
• Normalize stack entries, and stack traces across engines, with colors

License

MPL-1.1