Research
Security News
Quasar RAT Disguised as an npm Package for Detecting Vulnerabilities in Ethereum Smart Contracts
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
pkcs7-padding
Advanced tools
A tiny package that handles PKCS #7 padding for both strings and byte arrays
A tiny package that handles PKCS #7 padding for both strings and byte arrays.
See RFC 5652, section 6.3 for more details.
var pkcs7 = require('pkcs7-padding');
// padding
var data = new Uint8Array(14);
var padded = pkcs7.pad(data);
// unpadding
var raw = pkcs7.unpad(padded);
Note that unpad()
throws an error when the padded data is incorrect :
try {
var raw = pkcs7.unpad(data);
// use raw data
} catch (e) {
console.error('this is not a valid PKCS #7 padded buffer');
}
It works with strings as well :
var pkcs7 = require('pkcs7-padding');
var padded = pkcs7.pad('this is a text');
var raw = pkcs7.unpad(padded);
You have the ability to change the block size of the padded data.
The default block size is set to 16 bytes.
The maximum block size is 255 bytes.
var pkcs7 = require('pkcs7-padding');
var data = new Uint8Array(14);
var padded = pkcs7.pad('this is a text', 32); // pad data on 32 bytes block size.
console.log(padded.byteLength); // 32
var raw = pkcs7.unpad(padded); // you can unpad any block size
console.log(raw.byteLength); // 14
FAQs
A tiny package that handles PKCS #7 padding for both strings and byte arrays
We found that pkcs7-padding demonstrated a not healthy version release cadence and project activity because the last version was released a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Security News
Socket researchers uncover a malicious npm package posing as a tool for detecting vulnerabilities in Etherium smart contracts.
Security News
Research
A supply chain attack on Rspack's npm packages injected cryptomining malware, potentially impacting thousands of developers.
Research
Security News
Socket researchers discovered a malware campaign on npm delivering the Skuld infostealer via typosquatted packages, exposing sensitive data.