Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
bittorrent-dht-sodium
Advanced tools
bittorrent-dht-sodium
Sodium wrapper for working with BEP44 on bittorrent-dht
var eddsa = require('bittorrent-dht-sodium')
const DHT = require('bittorrent-dht')
const dht = new DHT({
verify: eddsa.verify
})
const keys = eddsa.keygen()
dht.put({
v: Buffer.from('Hello world'),
k: keys.pk,
seq: 0,
sign: (msg) => {
return eddsa.sign(msg, keys.sk)
}
}, function (err, hash) {
// ...
})
const { pk, sk } = eddsa.keygen([sk])
Derive a Ed25519 keypair, optionally deriving the pk
from an exisiting sk
.
Returns pk
as Public Key, sk
as Secret Key. The sk
here is not compatible
with ed25519-supercop
, as the encoding is different, but signatures will be
the same.
const sig = eddsa.sign(msg, sk)
Sign Buffer
msg
with sk
returning the signature as a Buffer
const valid = eddsa.verify(sig, msg, pk)
Verify Buffer
sig
against Buffer
msg
with pk
returning boolean whether
valid or not.
const salt = eddsa.salt()
Generate a 64 byte random salt. This is equal to the block size of SHA-1, the hash function used by the DHT.
npm install bittorrent-dht-sodium
FAQs
Sodium wrapper for working with BEP44 on bittorrent-dht
The npm package bittorrent-dht-sodium receives a total of 26 weekly downloads. As such, bittorrent-dht-sodium popularity was classified as not popular.
We found that bittorrent-dht-sodium demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.