@aws-crypto/decrypt-browser - npm Package Compare versions

Comparing version 1.1.2 to 1.7.0

build/main/decrypt.d.ts

@@ -1,2 +0,2 @@
-import { KeyringWebCrypto, WebCryptoMaterialsManager } from '@aws-crypto/material-management-browser';
+import { KeyringWebCrypto, WebCryptoMaterialsManager, CommitmentPolicy } from '@aws-crypto/material-management-browser';
 import { MessageHeader } from '@aws-crypto/serialize';
@@ -7,3 +7,3 @@ export interface DecryptResult {
 }
-export declare function decrypt(cmm: KeyringWebCrypto | WebCryptoMaterialsManager, ciphertext: Uint8Array): Promise<DecryptResult>;
+export declare function _decrypt(commitmentPolicy: CommitmentPolicy, cmm: KeyringWebCrypto | WebCryptoMaterialsManager, ciphertext: Uint8Array): Promise<DecryptResult>;
 //# sourceMappingURL=decrypt.d.ts.map

build/main/decrypt.js

@@ -5,2 +5,3 @@ "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports._decrypt = void 0;
 const material_management_browser_1 = require("@aws-crypto/material-management-browser");
@@ -11,3 +12,5 @@ const serialize_1 = require("@aws-crypto/serialize");
 const { messageAADContentString, messageAAD } = serialize_1.aadFactory(util_utf8_browser_1.fromUtf8);
-async function decrypt(cmm, ciphertext) {
+async function _decrypt(commitmentPolicy, cmm, ciphertext) {
+    /* Precondition: _decrypt needs a valid commitmentPolicy. */
+    material_management_browser_1.needs(material_management_browser_1.CommitmentPolicy[commitmentPolicy], 'Invalid commitment policy.');
     /* If the cmm is a Keyring, wrap it with WebCryptoDefaultCryptographicMaterialsManager. */
@@ -21,5 +24,12 @@ cmm =
         throw new Error('Unable to parse Header');
-    const { messageHeader } = headerInfo;
-    const { rawHeader, headerIv, headerAuthTag } = headerInfo;
+    const { messageHeader, algorithmSuite } = headerInfo;
+    const { rawHeader, headerAuth } = headerInfo;
+    const { headerIv, headerAuthTag } = headerAuth;
     const { encryptionContext, encryptedDataKeys, suiteId, messageId, } = messageHeader;
+    // Very quick hex string
+    const messageIdStr = [...messageId]
+        .map((i) => (i > 15 ? i.toString(16) : '0' + i.toString(16)))
+        .join('');
+    /* The parsed header algorithmSuite in _decrypt must be supported by the commitmentPolicy. */
+    material_management_browser_1.CommitmentPolicySuites.isDecryptEnabled(commitmentPolicy, algorithmSuite, messageIdStr);
     const suite = new material_management_browser_1.WebCryptoAlgorithmSuite(suiteId);
@@ -31,5 +41,6 @@ const material = await cmm.decryptMaterials({
     });
-    const { kdfGetSubtleDecrypt, subtleVerify, dispose, } = await material_management_browser_1.getDecryptionHelper(material);
-    const info = serialize_1.kdfInfo(suiteId, messageId);
-    const getSubtleDecrypt = kdfGetSubtleDecrypt(info);
+    /* The material algorithmSuite returned to _decrypt must be supported by the commitmentPolicy. */
+    material_management_browser_1.CommitmentPolicySuites.isDecryptEnabled(commitmentPolicy, material.suite, messageIdStr);
+    const { getDecryptInfo, subtleVerify, dispose } = await material_management_browser_1.getDecryptionHelper(material);
+    const getSubtleDecrypt = await getDecryptInfo(messageId, messageHeader.suiteData);
     // The tag is appended to the Data
@@ -57,7 +68,5 @@ await getSubtleDecrypt(headerIv, rawHeader)(headerAuthTag); // will throw if invalid
 }
-exports.decrypt = decrypt;
+exports._decrypt = _decrypt;
 async function bodyDecrypt({ buffer, getSubtleDecrypt, headerInfo, }) {
-    let readPos = headerInfo.headerIv.byteLength +
-        headerInfo.rawHeader.byteLength +
-        headerInfo.headerAuthTag.byteLength;
+    let readPos = headerInfo.rawHeader.byteLength + headerInfo.headerAuth.headerAuthLength;
     const clearBuffers = [];
@@ -111,2 +120,2 @@ let sequenceNumber = 0;
 }
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiZGVjcnlwdC5qcyIsInNvdXJjZVJvb3QiOiIiLCJzb3VyY2VzIjpbIi4uLy4uL3NyYy9kZWNyeXB0LnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiI7QUFBQSxvRUFBb0U7QUFDcEUsc0NBQXNDOztBQUV0Qyx5RkFRZ0Q7QUFDaEQscURBVThCO0FBQzlCLGtFQUE2RDtBQUU3RCxNQUFNLFdBQVcsR0FBRyw4QkFBa0IsQ0FBQywwQkFBTSxFQUFFLHFEQUF1QixDQUFDLENBQUE7QUFDdkUsTUFBTSxFQUFFLHVCQUF1QixFQUFFLFVBQVUsRUFBRSxHQUFHLHNCQUFVLENBQUMsNEJBQVEsQ0FBQyxDQUFBO0FBTzdELEtBQUssVUFBVSxPQUFPLENBQzNCLEdBQWlELEVBQ2pELFVBQXNCO0lBRXRCLDBGQUEwRjtJQUMxRixHQUFHO1FBQ0QsR0FBRyxZQUFZLDhDQUFnQjtZQUM3QixDQUFDLENBQUMsSUFBSSwyRUFBNkMsQ0FBQyxHQUFHLENBQUM7WUFDeEQsQ0FBQyxDQUFDLEdBQUcsQ0FBQTtJQUVULE1BQU0sVUFBVSxHQUFHLFdBQVcsQ0FBQyx3QkFBd0IsQ0FBQyxVQUFVLENBQUMsQ0FBQTtJQUNuRSxJQUFJLFVBQVUsS0FBSyxLQUFLO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyx3QkFBd0IsQ0FBQyxDQUFBO0lBQ25FLE1BQU0sRUFBRSxhQUFhLEVBQUUsR0FBRyxVQUFVLENBQUE7SUFDcEMsTUFBTSxFQUFFLFNBQVMsRUFBRSxRQUFRLEVBQUUsYUFBYSxFQUFFLEdBQUcsVUFBVSxDQUFBO0lBQ3pELE1BQU0sRUFDSixpQkFBaUIsRUFDakIsaUJBQWlCLEVBQ2pCLE9BQU8sRUFDUCxTQUFTLEdBQ1YsR0FBRyxhQUFhLENBQUE7SUFDakIsTUFBTSxLQUFLLEdBQUcsSUFBSSxxREFBdUIsQ0FBQyxPQUFPLENBQUMsQ0FBQTtJQUVsRCxNQUFNLFFBQVEsR0FBRyxNQUFNLEdBQUcsQ0FBQyxnQkFBZ0IsQ0FBQztRQUMxQyxLQUFLO1FBQ0wsaUJBQWlCO1FBQ2pCLGlCQUFpQjtLQUNsQixDQUFDLENBQUE7SUFDRixNQUFNLEVBQ0osbUJBQW1CLEVBQ25CLFlBQVksRUFDWixPQUFPLEdBQ1IsR0FBRyxNQUFNLGlEQUFtQixDQUFDLFFBQVEsQ0FBQyxDQUFBO0lBQ3ZDLE1BQU0sSUFBSSxHQUFHLG1CQUFPLENBQUMsT0FBTyxFQUFFLFNBQVMsQ0FBQyxDQUFBO0lBQ3hDLE1BQU0sZ0JBQWdCLEdBQUcsbUJBQW1CLENBQUMsSUFBSSxDQUFDLENBQUE7SUFFbEQsa0NBQWtDO0lBQ2xDLE1BQU0sZ0JBQWdCLENBQUMsUUFBUSxFQUFFLFNBQVMsQ0FBQyxDQUFDLGFBQWEsQ0FBQyxDQUFBLENBQUMsd0JBQXdCO0lBRW5GLE1BQU0sRUFBRSxTQUFTLEVBQUUsT0FBTyxFQUFFLEdBQUcsTUFBTSxXQUFXLENBQUM7UUFDL0MsTUFBTSxFQUFFLFVBQVU7UUFDbEIsZ0JBQWdCO1FBQ2hCLFVBQVU7S0FDWCxDQUFDLENBQUE7SUFFRixPQUFPLEVBQUUsQ0FBQTtJQUVULElBQUksWUFBWSxFQUFFO1FBQ2hCLE1BQU0sSUFBSSxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsQ0FBQyxFQUFFLE9BQU8sQ0FBQyxDQUFBO1FBQ3pDLE1BQU0sYUFBYSxHQUFHLFVBQVUsQ0FBQyxLQUFLLENBQUMsT0FBTyxDQUFDLENBQUE7UUFFL0MsTUFBTSxZQUFZLEdBQUcsZ0NBQW9CLENBQUMsYUFBYSxDQUFDLENBQUE7UUFDeEQsTUFBTSxZQUFZLEdBQUcsbUJBQU8sQ0FBQyxZQUFZLEVBQUUsUUFBUSxDQUFDLEtBQUssQ0FBQyxDQUFBO1FBRTFELE1BQU0sT0FBTyxHQUFHLE1BQU0sWUFBWSxDQUFDLFlBQVksRUFBRSxJQUFJLENBQUMsQ0FBQTtRQUN0RCw4REFBOEQ7UUFDOUQsbUNBQUssQ0FBQyxPQUFPLEVBQUUsbUJBQW1CLENBQUMsQ0FBQTtRQUNuQyxPQUFPLEVBQUUsYUFBYSxFQUFFLFNBQVMsRUFBRSxDQUFBO0tBQ3BDO1NBQU07UUFDTCxPQUFPLEVBQUUsYUFBYSxFQUFFLFNBQVMsRUFBRSxDQUFBO0tBQ3BDO0FBQ0gsQ0FBQztBQTVERCwwQkE0REM7QUFZRCxLQUFLLFVBQVUsV0FBVyxDQUFDLEVBQ3pCLE1BQU0sRUFDTixnQkFBZ0IsRUFDaEIsVUFBVSxHQUNTO0lBQ25CLElBQUksT0FBTyxHQUNULFVBQVUsQ0FBQyxRQUFRLENBQUMsVUFBVTtRQUM5QixVQUFVLENBQUMsU0FBUyxDQUFDLFVBQVU7UUFDL0IsVUFBVSxDQUFDLGFBQWEsQ0FBQyxVQUFVLENBQUE7SUFDckMsTUFBTSxZQUFZLEdBQWtCLEVBQUUsQ0FBQTtJQUN0QyxJQUFJLGNBQWMsR0FBRyxDQUFDLENBQUE7SUFDdEIsaUZBQWlGO0lBQ2pGLHdEQUF3RDtJQUN4RCx1RUFBdUU7SUFDdkUsMENBQTBDO0lBQzFDLE9BQU8sSUFBSSxFQUFFO1FBQ1gseUNBQXlDO1FBRXpDLGtEQUFrRDtRQUNsRCxjQUFjLElBQUksQ0FBQyxDQUFBO1FBRW5CLE1BQU0sRUFBRSxTQUFTLEVBQUUsU0FBUyxFQUFFLEdBQUcsTUFBTSxhQUFhLENBQUM7WUFDbkQsTUFBTTtZQUNOLGdCQUFnQjtZQUNoQixVQUFVO1lBQ1YsT0FBTztTQUNSLENBQUMsQ0FBQTtRQUVGOzs7OztXQUtHO1FBQ0gsbUNBQUssQ0FDSCxTQUFTLENBQUMsY0FBYyxLQUFLLGNBQWMsRUFDM0MsdUNBQXVDLENBQ3hDLENBQUE7UUFFRCxZQUFZLENBQUMsSUFBSSxDQUFDLFNBQVMsQ0FBQyxDQUFBO1FBQzVCLE9BQU8sR0FBRyxTQUFTLENBQUMsT0FBTyxDQUFBO1FBQzNCLElBQUksU0FBUyxDQUFDLFlBQVksRUFBRTtZQUMxQixNQUFNLFNBQVMsR0FBRyx5QkFBYSxDQUFDLEdBQUcsWUFBWSxDQUFDLENBQUE7WUFDaEQsT0FBTyxFQUFFLFNBQVMsRUFBRSxPQUFPLEVBQUUsQ0FBQTtTQUM5QjtLQUNGO0FBQ0gsQ0FBQztBQUVEOzs7R0FHRztBQUNILEtBQUssVUFBVSxhQUFhLENBQUMsRUFDM0IsTUFBTSxFQUNOLGdCQUFnQixFQUNoQixVQUFVLEVBQ1YsT0FBTyxHQUNjO0lBQ3JCLE1BQU0sRUFDSixhQUFhLEVBQUUsRUFBRSxTQUFTLEVBQUUsR0FDN0IsR0FBRyxVQUFVLENBQUE7SUFDZCxNQUFNLFNBQVMsR0FBRyw0QkFBZ0IsQ0FBQyxNQUFNLEVBQUUsVUFBVSxFQUFFLE9BQU8sQ0FBQyxDQUFBO0lBQy9ELElBQUksQ0FBQyxTQUFTO1FBQUUsTUFBTSxJQUFJLEtBQUssQ0FBQyxjQUFjLENBQUMsQ0FBQTtJQUMvQyxNQUFNLFlBQVksR0FBRyxTQUFTLENBQUMsYUFBYSxHQUFHLFNBQVMsQ0FBQyxTQUFTLEdBQUcsQ0FBQyxDQUFBO0lBQ3RFLE1BQU0sYUFBYSxHQUFHLHVCQUF1QixDQUFDLFNBQVMsQ0FBQyxDQUFBO0lBQ3hELE1BQU0scUJBQXFCLEdBQUcsVUFBVSxDQUN0QyxTQUFTLEVBQ1QsYUFBYSxFQUNiLFNBQVMsQ0FBQyxjQUFjLEVBQ3hCLFNBQVMsQ0FBQyxhQUFhLENBQ3hCLENBQUE7SUFDRCxNQUFNLFVBQVUsR0FBRyxNQUFNLENBQUMsS0FBSyxDQUM3QixTQUFTLENBQUMsT0FBTyxFQUNqQixTQUFTLENBQUMsT0FBTyxHQUFHLFlBQVksQ0FDakMsQ0FBQTtJQUNELE1BQU0sU0FBUyxHQUFHLE1BQU0sZ0JBQWdCLENBQ3RDLFNBQVMsQ0FBQyxFQUFFLEVBQ1oscUJBQXFCLENBQ3RCLENBQUMsVUFBVSxDQUFDLENBQUE7SUFDYixTQUFTLENBQUMsT0FBTyxJQUFJLFlBQVksQ0FBQTtJQUNqQyxPQUFPLEVBQUUsU0FBUyxFQUFFLFNBQVMsRUFBRSxDQUFBO0FBQ2pDLENBQUMifQ==
+//# sourceMappingURL=data:application/json;base64,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

build/main/index.d.ts

@@ -1,3 +0,6 @@
-export * from './decrypt';
+import { buildDecrypt } from './decrypt_client';
 export { MessageHeader } from '@aws-crypto/serialize';
+/** @deprecated Use `buildDecrypt(CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT)` for migration. */
+export declare const decrypt: (cmm: import("@aws-crypto/material-management-browser").KeyringWebCrypto | import("@aws-crypto/material-management-browser").WebCryptoMaterialsManager, ciphertext: Uint8Array) => Promise<import("./decrypt").DecryptResult>;
+export { buildDecrypt };
 //# sourceMappingURL=index.d.ts.map

build/main/index.js

 "use strict";
 // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
-function __export(m) {
-    for (var p in m) if (!exports.hasOwnProperty(p)) exports[p] = m[p];
-}
 Object.defineProperty(exports, "__esModule", { value: true });
-__export(require("./decrypt"));
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUFBLG9FQUFvRTtBQUNwRSxzQ0FBc0M7Ozs7O0FBRXRDLCtCQUF5QiJ9
+exports.buildDecrypt = exports.decrypt = void 0;
+const material_management_browser_1 = require("@aws-crypto/material-management-browser");
+const decrypt_client_1 = require("./decrypt_client");
+Object.defineProperty(exports, "buildDecrypt", { enumerable: true, get: function () { return decrypt_client_1.buildDecrypt; } });
+/** @deprecated Use `buildDecrypt(CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT)` for migration. */
+exports.decrypt = decrypt_client_1.buildDecrypt(material_management_browser_1.CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT).decrypt;
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IjtBQUFBLG9FQUFvRTtBQUNwRSxzQ0FBc0M7OztBQUV0Qyx5RkFBMEU7QUFDMUUscURBQStDO0FBTXRDLDZGQU5BLDZCQUFZLE9BTUE7QUFKckIsbUdBQW1HO0FBQ3BGLGVBQU8sR0FBSyw2QkFBWSxDQUNyQyw4Q0FBZ0IsQ0FBQyw0QkFBNEIsQ0FDOUMsU0FBQSJ9

build/module/decrypt.d.ts

@@ -1,2 +0,2 @@
-import { KeyringWebCrypto, WebCryptoMaterialsManager } from '@aws-crypto/material-management-browser';
+import { KeyringWebCrypto, WebCryptoMaterialsManager, CommitmentPolicy } from '@aws-crypto/material-management-browser';
 import { MessageHeader } from '@aws-crypto/serialize';
@@ -7,3 +7,3 @@ export interface DecryptResult {
 }
-export declare function decrypt(cmm: KeyringWebCrypto | WebCryptoMaterialsManager, ciphertext: Uint8Array): Promise<DecryptResult>;
+export declare function _decrypt(commitmentPolicy: CommitmentPolicy, cmm: KeyringWebCrypto | WebCryptoMaterialsManager, ciphertext: Uint8Array): Promise<DecryptResult>;
 //# sourceMappingURL=decrypt.d.ts.map

build/module/decrypt.js

 // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
-import { WebCryptoAlgorithmSuite, KeyringWebCrypto, WebCryptoDefaultCryptographicMaterialsManager, getDecryptionHelper, needs, } from '@aws-crypto/material-management-browser';
-import { deserializeSignature, deserializeFactory, kdfInfo, decodeBodyHeader, aadFactory, concatBuffers, der2raw, } from '@aws-crypto/serialize';
+import { WebCryptoAlgorithmSuite, KeyringWebCrypto, WebCryptoDefaultCryptographicMaterialsManager, getDecryptionHelper, needs, CommitmentPolicy, CommitmentPolicySuites, } from '@aws-crypto/material-management-browser';
+import { deserializeSignature, deserializeFactory, decodeBodyHeader, aadFactory, concatBuffers, der2raw, } from '@aws-crypto/serialize';
 import { fromUtf8, toUtf8 } from '@aws-sdk/util-utf8-browser';
 const deserialize = deserializeFactory(toUtf8, WebCryptoAlgorithmSuite);
 const { messageAADContentString, messageAAD } = aadFactory(fromUtf8);
-export async function decrypt(cmm, ciphertext) {
+export async function _decrypt(commitmentPolicy, cmm, ciphertext) {
+    /* Precondition: _decrypt needs a valid commitmentPolicy. */
+    needs(CommitmentPolicy[commitmentPolicy], 'Invalid commitment policy.');
     /* If the cmm is a Keyring, wrap it with WebCryptoDefaultCryptographicMaterialsManager. */
@@ -17,5 +19,12 @@ cmm =
         throw new Error('Unable to parse Header');
-    const { messageHeader } = headerInfo;
-    const { rawHeader, headerIv, headerAuthTag } = headerInfo;
+    const { messageHeader, algorithmSuite } = headerInfo;
+    const { rawHeader, headerAuth } = headerInfo;
+    const { headerIv, headerAuthTag } = headerAuth;
     const { encryptionContext, encryptedDataKeys, suiteId, messageId, } = messageHeader;
+    // Very quick hex string
+    const messageIdStr = [...messageId]
+        .map((i) => (i > 15 ? i.toString(16) : '0' + i.toString(16)))
+        .join('');
+    /* The parsed header algorithmSuite in _decrypt must be supported by the commitmentPolicy. */
+    CommitmentPolicySuites.isDecryptEnabled(commitmentPolicy, algorithmSuite, messageIdStr);
     const suite = new WebCryptoAlgorithmSuite(suiteId);
@@ -27,5 +36,6 @@ const material = await cmm.decryptMaterials({
     });
-    const { kdfGetSubtleDecrypt, subtleVerify, dispose, } = await getDecryptionHelper(material);
-    const info = kdfInfo(suiteId, messageId);
-    const getSubtleDecrypt = kdfGetSubtleDecrypt(info);
+    /* The material algorithmSuite returned to _decrypt must be supported by the commitmentPolicy. */
+    CommitmentPolicySuites.isDecryptEnabled(commitmentPolicy, material.suite, messageIdStr);
+    const { getDecryptInfo, subtleVerify, dispose } = await getDecryptionHelper(material);
+    const getSubtleDecrypt = await getDecryptInfo(messageId, messageHeader.suiteData);
     // The tag is appended to the Data
@@ -54,5 +64,3 @@ await getSubtleDecrypt(headerIv, rawHeader)(headerAuthTag); // will throw if invalid
 async function bodyDecrypt({ buffer, getSubtleDecrypt, headerInfo, }) {
-    let readPos = headerInfo.headerIv.byteLength +
-        headerInfo.rawHeader.byteLength +
-        headerInfo.headerAuthTag.byteLength;
+    let readPos = headerInfo.rawHeader.byteLength + headerInfo.headerAuth.headerAuthLength;
     const clearBuffers = [];
@@ -106,2 +114,2 @@ let sequenceNumber = 0;
 }
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

build/module/index.d.ts

@@ -1,3 +0,6 @@
-export * from './decrypt';
+import { buildDecrypt } from './decrypt_client';
 export { MessageHeader } from '@aws-crypto/serialize';
+/** @deprecated Use `buildDecrypt(CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT)` for migration. */
+export declare const decrypt: (cmm: import("@aws-crypto/material-management-browser").KeyringWebCrypto | import("@aws-crypto/material-management-browser").WebCryptoMaterialsManager, ciphertext: Uint8Array) => Promise<import("./decrypt").DecryptResult>;
+export { buildDecrypt };
 //# sourceMappingURL=index.d.ts.map

build/module/index.js

 // Copyright Amazon.com Inc. or its affiliates. All Rights Reserved.
 // SPDX-License-Identifier: Apache-2.0
-export * from './decrypt';
-//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsb0VBQW9FO0FBQ3BFLHNDQUFzQztBQUV0QyxjQUFjLFdBQVcsQ0FBQSJ9
+import { CommitmentPolicy } from '@aws-crypto/material-management-browser';
+import { buildDecrypt } from './decrypt_client';
+/** @deprecated Use `buildDecrypt(CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT)` for migration. */
+export const { decrypt } = buildDecrypt(CommitmentPolicy.FORBID_ENCRYPT_ALLOW_DECRYPT);
+export { buildDecrypt };
+//# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiaW5kZXguanMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvaW5kZXgudHMiXSwibmFtZXMiOltdLCJtYXBwaW5ncyI6IkFBQUEsb0VBQW9FO0FBQ3BFLHNDQUFzQztBQUV0QyxPQUFPLEVBQUUsZ0JBQWdCLEVBQUUsTUFBTSx5Q0FBeUMsQ0FBQTtBQUMxRSxPQUFPLEVBQUUsWUFBWSxFQUFFLE1BQU0sa0JBQWtCLENBQUE7QUFFL0MsbUdBQW1HO0FBQ25HLE1BQU0sQ0FBQyxNQUFNLEVBQUUsT0FBTyxFQUFFLEdBQUcsWUFBWSxDQUNyQyxnQkFBZ0IsQ0FBQyw0QkFBNEIsQ0FDOUMsQ0FBQTtBQUNELE9BQU8sRUFBRSxZQUFZLEVBQUUsQ0FBQSJ9

CHANGELOG.md

@@ -6,2 +6,13 @@ # Change Log
 
+# [1.7.0](https://github.com/aws/private-aws-encryption-sdk-javascript-staging/compare/@aws-crypto/decrypt-browser@1.1.2...@aws-crypto/decrypt-browser@1.7.0) (2020-09-24)
+
+
+### Features
+
+* Updates to the AWS Encryption SDK. ([748be9e](https://github.com/aws/private-aws-encryption-sdk-javascript-staging/commit/748be9e1799d999a350e9cafbf902d43aeab0aa5))
+
+
+
+
+
 ## [1.1.2](https://github.com/aws/aws-encryption-sdk-javascript/compare/@aws-crypto/decrypt-browser@1.1.1...@aws-crypto/decrypt-browser@1.1.2) (2020-05-26)
@@ -8,0 +19,0 @@

package.json

 {
   "name": "@aws-crypto/decrypt-browser",
-  "version": "1.1.2",
+  "version": "1.7.0",
   "scripts": {
@@ -20,4 +20,4 @@ "prepublishOnly": "tsc -p tsconfig.json && tsc -p tsconfig.module.json",
   "dependencies": {
-    "@aws-crypto/material-management-browser": "^1.2.1",
-    "@aws-crypto/serialize": "^1.0.4",
+    "@aws-crypto/material-management-browser": "^1.7.0",
+    "@aws-crypto/serialize": "^1.7.0",
     "@aws-sdk/util-utf8-browser": "1.0.0-beta.2",
@@ -33,3 +33,3 @@ "tslib": "^1.11.1"
   ],
-  "gitHead": "4b60e0607e83d1ea2da98fd593e681f98f0d0082"
+  "gitHead": "4469f3ec0ea8dc42ac5fec37ba0c207675d46e69"
 }

Fixed alerts

Major refactor

Supply chain risk

Package has recently undergone a major refactor. It may be unstable or indicate significant internal changes. Use caution when updating to versions that include significant changes.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

368207

increased by10.05%

Number of package files

25

increased by31.58%

Lines of code

305

increased by29.24%

Number of medium supply chain risk alerts

0

decreased by-100%

Dependency changes

• Updated@aws-crypto/material-management-browser@^1.7.0

• Updated@aws-crypto/serialize@^1.7.0