crypto-es - npm Package Compare versions

Comparing version 2.0.4 to 2.1.0

lib/pbkdf2.js

@@ -5,3 +5,3 @@ import {
 } from './core.js';
-import { SHA1Algo } from './sha1.js';
+import { SHA256Algo } from './sha256.js';
 import { HMAC } from './hmac.js';
@@ -29,6 +29,9 @@
      * Configuration options.
+     * 
+     * The default `hasher` and `interations` is different from CryptoJs to enhance security:
+     * https://github.com/entronad/crypto-es/security/advisories/GHSA-mpj8-q39x-wq5h
      *
      * @property {number} keySize The key size in words to generate. Default: 4 (128 bits)
-     * @property {Hasher} hasher The hasher to use. Default: SHA1
-     * @property {number} iterations The number of iterations to perform. Default: 1
+     * @property {Hasher} hasher The hasher to use. Default: SHA256
+     * @property {number} iterations The number of iterations to perform. Default: 250000
      */
@@ -39,4 +42,4 @@ this.cfg = Object.assign(
         keySize: 128 / 32,
-        hasher: SHA1Algo,
-        iterations: 1,
+        hasher: SHA256Algo,
+        iterations: 250000,
       },
@@ -43,0 +46,0 @@ cfg,

package.json

 {
   "name": "crypto-es",
-  "version": "2.0.4",
+  "version": "2.1.0",
   "description": "A cryptography algorithms library compatible with ES6 and TypeScript",
@@ -5,0 +5,0 @@ "keywords": [

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

240135

increased by1.23%

Number of package files

74

increased by1.37%

Lines of code

7396

increased by0.04%

No dependency changes