Online PHP editor | perf for OCBiU

@ 2020-10-10T12:20:11Z

<?php

function shitmac_xor(string $str, int $with){
    $ret = "";
    for($i=0,$imax=strlen($str);$i<$imax;++$i){
        $ret .= chr( ord($str[$i]) ^ $with );
    }
    return $ret;
}

function shitmac(string $key, string $message, string $hash_algorithm = "SHA1", 
int $hash_algorithm_block_size = 64, int $hash_algorithm_output_size = 20){
    if(strlen($key) > $hash_algorithm_block_size){
        // this is probably a bad idea, but php is doing it anyway.
        // > RFC 2104 requires that "keys longer than B bytes are first hashed using H" which leads to a confusing pseudo-collision: if the key is longer than the hash block size (e.g. 64 characters for SHA-1), then HMAC(k, m) is computed as HMAC(H(k), m).This property is sometimes raised as a possible weakness of HMAC in password-hashing scenarios: it has been demonstrated that it's possible to find a long ASCII string and a random value whose hash will be also an ASCII string, and both values will produce the same HMAC output.
        
        // die("TODO: hash(hash_algo, key");
        $key = hash($hash_algorithm, $key, true);
    }
    if(strlen($key) < $hash_algorithm_block_size){
        // die("TODO: key=str_pad(key,x00,block_size,pad_left");
        $key = str_pad($key, $hash_algorithm_block_size, "\x00", STR_PAD_RIGHT);
    }
    $o_key_pad = shitmac_xor($key, 0x5C);
    $i_key_pad = shitmac_xor($key, 0x36);
    $ret = hash($hash_algorithm, $i_key_pad.$message, true);
    $ret = hash($hash_algorithm, $o_key_pad . $ret, true);
    return $ret;
}
$hash_algorithm = "SHA1";
$hash_algorithm_block_size = 64;
$hash_algorithm_output_size = 20;

$results=[];
for($i=0;$i<100;++$i){
    $key=str_repeat("\x00", $i);
    $message = "Hello World".random_bytes($i);
    $hmac = hash_hmac($hash_algorithm, $message, $key, true);
    $shitmac = shitmac($key, $message, $hash_algorithm, $hash_algorithm_block_size, $hash_algorithm_output_size);
    if($hmac === $shitmac){
        echo "{$i}: success!\n";
    }else{
        var_dump($i,$hmac,$shitmac);
        die("ERROR!");
    }
}

Here you find the average performance (time & memory) of each version. A grayed out version indicates it didn't complete successfully (based on exit-code).

Version	System time (s)	User time (s)	Memory (MiB)
7.4.11	0.010	0.015	16.48
7.4.10	0.013	0.004	16.61
7.4.9	0.009	0.012	16.38
7.4.8	0.009	0.009	16.52
7.4.7	0.017	0.003	16.41
7.4.6	0.006	0.013	16.36
7.4.5	0.003	0.014	16.49
7.4.4	0.009	0.015	16.42
7.4.3	0.011	0.007	16.44
7.4.2	0.018	0.000	16.55
7.4.1	0.007	0.013	16.28
7.4.0	0.003	0.014	16.44
7.3.23	0.012	0.012	16.29
7.3.22	0.015	0.003	16.40
7.3.21	0.004	0.018	16.31
7.3.20	0.007	0.010	16.43
7.3.19	0.006	0.016	16.21
7.3.18	0.010	0.010	16.31
7.3.17	0.017	0.008	16.36
7.3.16	0.008	0.011	16.36
7.3.15	0.004	0.013	16.43
7.3.14	0.012	0.008	16.37
7.3.13	0.015	0.007	16.54
7.3.12	0.006	0.011	16.43
7.3.11	0.010	0.007	16.54
7.3.10	0.003	0.014	16.54
7.3.9	0.011	0.005	16.60
7.3.8	0.006	0.011	16.30
7.3.7	0.004	0.015	16.31
7.3.6	0.006	0.010	16.44
7.3.5	0.009	0.009	16.18
7.3.4	0.008	0.008	16.30
7.3.3	0.000	0.017	16.33
7.3.2	0.113	0.010	16.27
7.3.1	0.007	0.010	16.36
7.3.0	0.013	0.008	16.24
7.2.34	0.017	0.007	16.61
7.2.33	0.012	0.009	16.65
7.2.32	0.006	0.014	16.54
7.2.31	0.014	0.003	16.55
7.2.30	0.011	0.015	16.54
7.2.29	0.004	0.016	16.61
7.2.28	0.004	0.015	16.63
7.2.27	0.009	0.009	16.65
7.2.26	0.015	0.003	16.65
7.2.25	0.008	0.010	16.43
7.2.24	0.013	0.006	16.65
7.2.23	0.019	0.000	16.72
7.2.22	0.003	0.014	16.66
7.2.21	0.013	0.003	16.53
7.2.20	0.008	0.008	16.59
7.2.19	0.003	0.013	16.65
7.2.18	0.006	0.016	16.50
7.2.17	0.011	0.008	16.61
7.2.16	0.011	0.009	16.46
7.2.15	0.015	0.004	16.73
7.2.14	0.007	0.011	16.51
7.2.13	0.010	0.010	16.69
7.2.12	0.077	0.010	16.44
7.2.11	0.009	0.009	16.59
7.2.10	0.007	0.011	16.48
7.2.9	0.013	0.008	16.54
7.2.8	0.012	0.006	16.64
7.2.7	0.014	0.007	16.64
7.2.6	0.006	0.011	16.49
7.2.5	0.012	0.004	16.61
7.2.4	0.008	0.011	16.61
7.2.3	0.014	0.008	16.59
7.2.2	0.014	0.006	16.40
7.2.1	0.018	0.006	16.47
7.2.0	0.009	0.009	16.64

preferences:dark modelive previewkey bindings