密码学哈希与校验和验证：Web Crypto API 深度指南

A cryptographic hash function is a mathematical algorithm that takes an arbitrary block of data and returns a fixed-size bit string (the hash value or digest). To be considered cryptographically secure, an algorithm must satisfy three core properties: Pre-image resistance (given a hash H, it is computationally infeasible to find message M such that hash(M) = H), Second pre-image resistance (given M1, it is impossible to find M2 such that hash(M1) = hash(M2)), and Collision resistance (it is impossible to find any two distinct messages M1 and M2 that produce the same hash). Furthermore, secure hashes exhibit the "avalanche effect": changing even a single bit in the input radically alters more than 50% of the output bits.

// Native Web Crypto API SHA-256 Hashing
async function computeSha256(message: string): Promise<string> {
  const encoder = new TextEncoder();
  const data = encoder.encode(message);
  const hashBuffer = await crypto.subtle.digest('SHA-256', data);
  const hashArray = Array.from(new Uint8Array(hashBuffer));
  return hashArray.map(b => b.toString(16).padStart(2, '0')).join('');
}

The Secure Hash Algorithms (SHA) family designed by the NSA and NIST represents the modern standard. SHA-256 (part of SHA-2) outputs 256 bits (64 hex characters) and remains impervious to practical collision attacks. SHA-512 provides an even wider 512-bit security margin and is often faster on 64-bit CPU architectures. Conversely, legacy algorithms like MD5 (128-bit) and SHA-1 (160-bit) have suffered demonstrated collision attacks (e.g., Google’s SHAttered attack in 2017) and should only be utilized for non-cryptographic checksums.

When downloading software binaries, ISO disk images, or security patches, developers compare the published checksum with the local file hash. Our Hash Generator reads local files via the HTML5 FileReader and ArrayBuffer APIs, streaming file chunks directly into crypto.subtle.digest(). This enables multi-gigabyte file checksum calculation in seconds without uploading a single byte to an external server.

A Hash-based Message Authentication Code (HMAC) combines a cryptographic hash function with a secret shared key. Used extensively in API signatures (AWS Signature V4, Stripe Webhooks, OAuth 1.0/2.0), HMAC guarantees both data integrity and authenticity, ensuring the message was not altered in transit and originated from an authorized party possessing the private secret.