node-forge - npm Package Compare versions

Comparing version 0.2.5 to 0.2.6

js/rsa.js

@@ -1420,5 +1420,16 @@ /**
   else {
-    var padBytes = forge.random.getBytes(padNum);
-    for(var i = 0; i < padNum; ++i) {
-      eb.putByte(Math.max(1, padBytes.charCodeAt(i)));
+    // pad with random non-zero values
+    while(padNum > 0) {
+      var numZeros = 0;
+      var padBytes = forge.random.getBytes(padNum);
+      for(var i = 0; i < padNum; ++i) {
+        padByte = padBytes.charCodeAt(i);
+        if(padByte === 0) {
+          ++numZeros;
+        }
+        else {
+          eb.putByte(padByte);
+        }
+      }
+      padNum = numZeros;
     }
@@ -1425,0 +1436,0 @@ }

package.json

 {
   "name": "node-forge",
-  "version": "0.2.5",
+  "version": "0.2.6",
   "description": "JavaScript implementations of network transports, cryptography, ciphers, PKI, message digests, and various utilties.",
@@ -5,0 +5,0 @@ "homepage": "http://github.com/digitalbazaar/forge",

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

2122515

increased by0.01%

Lines of code

34265

increased by0.03%

No dependency changes