jose-node-cjs-runtime - npm Package Compare versions

Comparing version 3.11.3 to 3.11.4

dist/node/cjs/runtime/decrypt.js

@@ -23,17 +23,20 @@ "use strict";
     }
-    let plaintext;
+    const expectedTag = cbc_tag_js_1.default(aad, iv, ciphertext, macSize, macKey, keySize);
+    let macCheckPassed;
     try {
-        const cipher = crypto_1.createDecipheriv(algorithm, encKey, iv);
-        plaintext = buffer_utils_js_1.concat(cipher.update(ciphertext), cipher.final());
+        macCheckPassed = timing_safe_equal_js_1.default(tag, expectedTag);
     }
     catch {
     }
-    const expectedTag = cbc_tag_js_1.default(aad, iv, ciphertext, macSize, macKey, keySize);
-    let macCheckPassed;
+    if (!macCheckPassed) {
+        throw new errors_js_1.JWEDecryptionFailed();
+    }
+    let plaintext;
     try {
-        macCheckPassed = timing_safe_equal_js_1.default(tag, expectedTag);
+        const cipher = crypto_1.createDecipheriv(algorithm, encKey, iv);
+        plaintext = buffer_utils_js_1.concat(cipher.update(ciphertext), cipher.final());
     }
     catch {
     }
-    if (!plaintext || !macCheckPassed) {
+    if (!plaintext) {
         throw new errors_js_1.JWEDecryptionFailed();
@@ -40,0 +43,0 @@ }

dist/node/cjs/runtime/webcrypto.js

@@ -46,3 +46,3 @@ "use strict";
         case 'RS512':
-            if (key.algorithm.name.toUpperCase() !== 'RSASSA-PKCS1-V1_5' ||
+            if (key.algorithm.name !== 'RSASSA-PKCS1-v1_5' ||
                 getHashLength(key.algorithm.hash) !== parseInt(alg.substr(2), 10)) {
@@ -49,0 +49,0 @@ throw new TypeError('CryptoKey does not support this operation');

package.json

 {
   "name": "jose-node-cjs-runtime",
-  "version": "3.11.3",
+  "version": "3.11.4",
   "description": "(Node.JS CJS Runtime) 'JSON Web Almost Everything' - JWA, JWS, JWE, JWT, JWK with no dependencies",
@@ -5,0 +5,0 @@ "keywords": [

No alert changes

Improved metrics

Total package byte prevSize

159527

increased by0.03%

Lines of code

3911

increased by0.08%

No dependency changes