@blamejs/core 0.15.33 → 0.15.34

package/CHANGELOG.md

@@ -8,6 +8,8 @@ upgrading across more than a few patches at a time.
 
 ## v0.15.x
 
+- v0.15.34 (2026-06-26) — **`b.mail.crypto.pgp.verify` now accepts every valid RSA OpenPGP signature — one whose value happened to have a high zero byte (about 1 in 256) was being rejected.** An OpenPGP RSA signature is an integer modulo the key's modulus, and ~1 in 256 signatures have a value that begins with a zero byte. The MPI encoding strips those leading zero bytes (RFC 9580 §3.2), but b.mail.crypto.pgp.verify passed the stripped value straight to the RSA verification, which requires a signature exactly the modulus byte length — so a perfectly valid signature was intermittently reported invalid. The signature is now left-padded back to the modulus width before verification, exactly as the Ed25519 path already pads its components. Verification of every valid RSA signature is now reliable, including signatures produced by other OpenPGP implementations. Also includes internal test-tooling: two more guard-suite suppression classes were re-verified and their tokens retired. **Fixed:** *RSA OpenPGP signatures with a high zero byte now verify reliably* — b.mail.crypto.pgp.verify read the RSA signature MPI (whose leading zero bytes the OpenPGP wire format strips) and handed it to the RSA verification without restoring the stripped bytes. Node's RSA verify requires the signature to be exactly the modulus byte length, so a signature whose value had one or more high zero bytes — about 1 in 256 of all signatures, for any key — was rejected as invalid even though it was correct. The signature is now left-padded to the modulus width before verification (the same correction the Ed25519 verification path already applied to its R/S components). This affects signatures the framework produces and signatures from other OpenPGP implementations alike. A deterministic regression test searches for a short-MPI signature and asserts it verifies. **Detectors:** *Two more suppression-marker classes re-verified and their tokens retired* — The raw-hash-compare and seal-without-aad guard classes were re-read and confirmed (a data-residency region tag compared with === — not a secret; and two intentional non-AEAD-bound seals — a non-regulated plain-mode column whose AAD is enforced by the posture seal-envelope floor where it matters, and a throwaway vault-readiness probe), then renamed to descriptive tokens with their old names added to the retired-token set. Test-suite tooling only.
+
 - v0.15.33 (2026-06-26) — **Internal test-suite hardening only — the published library's runtime behavior and public API are unchanged (source-comment marker text aside).** Three more suppression classes in the codebase-patterns guard suite were re-verified from scratch and renamed to descriptive tokens, with their old names recorded as retired and their in-source marker comments updated to match. No runtime code, public API, or wire format changed. **Detectors:** *Three more suppression-marker classes re-verified and their tokens retired* — Continuing the re-verification pass: each marked site for the math-random-noncrypto, raw-new-url, and dynamic-require guard classes was re-read and confirmed (non-security jitter/sampling; URL parsing for shape/origin inspection or behind the safe wrapper; operator-supplied module loads), then the class was renamed to a descriptive token and its old name added to the retired-token set. This is test-suite tooling; no shipped framework behavior changed.
 
 - v0.15.32 (2026-06-26) — **Internal test-suite hardening only — the published library's runtime behavior and public API are unchanged (source-comment marker text aside).** Three more suppression classes in the codebase-patterns guard suite were re-verified from scratch and renamed to descriptive tokens, with their old names recorded as retired so the prior approval cannot be silently resurrected and their in-source marker comments updated to match. No runtime code, public API, or wire format changed. **Detectors:** *Three more suppression-marker classes re-verified and their tokens retired* — Continuing the re-verification pass: each marked site for the process-exit, hand-rolled buffer-collect, and raw-outbound-http guard classes was re-read and confirmed (operator-opt-in exits; bounded protocol-framing / TLV assembly; framework-routed outbound calls), then the class was renamed to a descriptive token and its old name added to the retired-token set. This is test-suite tooling; no shipped framework behavior changed.

package/lib/crypto-field.js

@@ -1090,7 +1090,7 @@ function sealRow(table, row, opts) {
       out[field] = vaultAad.seal(_encodeTyped(out[field]),
         _aadParts(s, table, field, out));
     } else {
-      // allow:seal-without-aad — plain-mode legacy table; operator
+      // allow:seal-without-aad-by-design — plain-mode legacy table; operator
       // opts into AAD via registerTable({aad:true})
       out[field] = vault.seal(_encodeTyped(out[field]));
     }

package/lib/external-db.js

@@ -1709,7 +1709,7 @@ function _crossBorderRegulated(posture) {
 
 function _residencyCompatible(primaryTag, replicaTag) {
   if (!primaryTag || !replicaTag) return true;
-  if (primaryTag === replicaTag) return true; // allow:raw-hash-compare — residency tag string, not a secret hash
+  if (primaryTag === replicaTag) return true; // allow:raw-hash-compare-nonsecret-tag — residency tag string, not a secret hash
   if (primaryTag === "unrestricted" || replicaTag === "unrestricted") return true;
   return false;
 }

package/lib/mail-crypto-pgp.js

@@ -865,11 +865,22 @@ function verify(opts) {
   var ok;
   if (parsed.pubAlg === PUB_ALG_RSA) {
     var rsaMpi = _readMpi(parsed.sigMpisBytes, 0);
+    // The signature is an integer in [0, n); when its value has one or more
+    // high zero bytes (~1/256 of signatures) the OpenPGP MPI encoding strips
+    // them (RFC 9580 §3.2), but node's RSA verify requires a signature exactly
+    // the modulus byte length. Left-pad the stripped MPI back to the modulus
+    // width — the same correction the Ed25519 branch applies to its R/S
+    // components below — or a valid signature is rejected.
+    var rsaSigBytes = rsaMpi.value;
+    var modLen = rsaPub.n.length;
+    if (rsaSigBytes.length < modLen) {
+      rsaSigBytes = Buffer.concat([Buffer.alloc(modLen - rsaSigBytes.length), rsaSigBytes]);
+    }
     try {
       ok = nodeCrypto.verify(hashName, hashInput, {
         key: publicKey,
         padding: nodeCrypto.constants.RSA_PKCS1_PADDING,
-      }, rsaMpi.value);
+      }, rsaSigBytes);
     } catch (e) {
       return _fail("mail-crypto/pgp/verify-error",
         "RSA verify threw: " + ((e && e.message) || String(e)));

package/lib/middleware/idempotency-key.js

@@ -290,7 +290,7 @@ function dbStore(opts) {
   var sealEnabled = false;
   if (sealReq) {
     try {
-      // allow:seal-without-aad — vault-readiness probe; throwaway
+      // allow:seal-without-aad-by-design — vault-readiness probe; throwaway
       // sentinel value, not row-bound data
       vault.seal("__idempotency_seal_probe__");
       sealEnabled = true;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@blamejs/core",
-  "version": "0.15.33",
+  "version": "0.15.34",
   "description": "The Node framework that owns its stack.",
   "license": "Apache-2.0",
   "author": "blamejs contributors",

package/sbom.cdx.json

@@ -2,10 +2,10 @@
   "$schema": "http://cyclonedx.org/schema/bom-1.5.schema.json",
   "bomFormat": "CycloneDX",
   "specVersion": "1.5",
-  "serialNumber": "urn:uuid:cfba44f6-db8e-47b3-b1dc-e142692c3a97",
+  "serialNumber": "urn:uuid:4006bc32-7ae3-4f18-bad1-057410956255",
   "version": 1,
   "metadata": {
-    "timestamp": "2026-06-26T23:00:05.686Z",
+    "timestamp": "2026-06-27T01:06:19.602Z",
     "lifecycles": [
       {
         "phase": "build"
@@ -19,14 +19,14 @@
       }
     ],
     "component": {
-      "bom-ref": "@blamejs/core@0.15.33",
+      "bom-ref": "@blamejs/core@0.15.34",
       "type": "application",
       "name": "blamejs",
-      "version": "0.15.33",
+      "version": "0.15.34",
       "scope": "required",
       "author": "blamejs contributors",
       "description": "The Node framework that owns its stack.",
-      "purl": "pkg:npm/%40blamejs/core@0.15.33",
+      "purl": "pkg:npm/%40blamejs/core@0.15.34",
       "properties": [],
       "externalReferences": [
         {
@@ -54,7 +54,7 @@
   "components": [],
   "dependencies": [
     {
-      "ref": "@blamejs/core@0.15.33",
+      "ref": "@blamejs/core@0.15.34",
       "dependsOn": []
     }
   ]