sodium-native - npm Package Compare versions

Comparing version 2.1.4 to 2.1.5

CHANGELOG.md

 # CHANGELOG
 
+## v2.1.5
+
+Fixes a critical bug in `crypto_secretstream_xchacha20poly1305_init_push` where
+it would call `crypto_secretstream_xchacha20poly1305_init_pull` instead.
+
 ## v2.1.4
@@ -4,0 +9,0 @@

package.json

 {
   "name": "sodium-native",
-  "version": "2.1.4",
+  "version": "2.1.5",
   "description": "Low level bindings for libsodium",
@@ -5,0 +5,0 @@ "main": "index.js",

README.md

@@ -28,3 +28,3 @@ # sodium-native
 var nonce = new Buffer(sodium.crypto_secretbox_NONCEBYTES)
-var key = new Buffer(sodium.crypto_secretbox_KEYBYTES)
+var key = sodium.sodium_malloc(sodium.crypto_secretbox_KEYBYTES) // secure buffer
 var message = new Buffer('Hello, World!')
@@ -52,2 +52,4 @@ var cipher = new Buffer(message.length + sodium.crypto_secretbox_MACBYTES)
 
+[**Go to docs for the latest release**](https://github.com/sodium-friends/sodium-native/tree/v2.1.4) (The following docs may be for a unreleased version)
+
 #### `var sodium = require('sodium-native')`
@@ -181,3 +183,3 @@
 
-* `message` should be a buffer with length `signedMessage - crypto_sign_BYTES`.
+* `message` should be a buffer with length `signedMessage.length - crypto_sign_BYTES`.
 * `signedMessage` at least `crypto_sign_BYTES` length.
@@ -184,0 +186,0 @@ * `publicKey` should be a public key.

test/crypto_secretstream.js

@@ -56,2 +56,3 @@ var test = require('tape')
   sodium.crypto_secretstream_xchacha20poly1305_init_push(state, header, key)
+  assert.notSame(header.toString('hex'), '000000000000000000000000000000000000000000000000')
   ret = sodium.crypto_secretstream_xchacha20poly1305_push(state, c1, m1, null, sodium.crypto_secretstream_xchacha20poly1305_TAG_MESSAGE)
@@ -58,0 +59,0 @@ assert.same(ret, m1.length + sodium.crypto_secretstream_xchacha20poly1305_ABYTES)

New alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Fixed alerts

License Policy Violation

License

This package is not allowed per your license policy. Review the package's license to ensure compliance.

Found 1 instance in 1 package

Improved metrics

Total package byte prevSize

20981589

increased by0.41%

Lines of code

1490

increased by0.07%

Number of lines in readme file

860

increased by0.23%

No dependency changes