Hashing algorithm conform to Owasp.

secureHash.coffee

crypto = require("crypto")

#
# Hashing algorithm conform to Owasp.
# https://www.owasp.org/index.php/Hashing_Java
#
exports.secureHash = (algorithm, key, message, iterations) ->
  hash = crypto.createHash(algorithm)
  hmac = crypto.createHmac(algorithm, key)
  buf = hash.update(key).digest() + message
  i = 0

  while i < iterations - 1
    buf = hmac.update(buf).digest()
    hmac = crypto.createHmac(algorithm, key)
    i++
  hmac = crypto.createHmac(algorithm, key)
  hmac.update(buf).digest "base64"