@bsv/sdk 1.9.10 → 1.9.12

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bsv/sdk",
-  "version": "1.9.10",
+  "version": "1.9.12",
   "type": "module",
   "description": "BSV Blockchain Software Development Kit",
   "main": "dist/cjs/mod.js",

package/src/primitives/Random.ts

@@ -7,7 +7,6 @@
  * - Modern browsers via globalThis.crypto, self.crypto, or window.crypto
  * - Web Workers and Service Workers via self.crypto
  * - Deno and Bun via globalThis.crypto
- * - React Native (requires react-native-get-random-values polyfill)
  *
  * @throws {Error} If no secure random number generator is available
  */
@@ -72,34 +71,6 @@ class Rand {
       return
     }
 
-    // React Native support - try to load polyfill
-    if (typeof navigator !== 'undefined' && (navigator as any).product === 'ReactNative') {
-      try {
-        // Try to require the polyfill - this will populate globalThis.crypto
-        // eslint-disable-next-line @typescript-eslint/no-var-requires
-        require('react-native-get-random-values')
-
-        if (typeof (globalThis as any).crypto?.getRandomValues === 'function') {
-          this._rand = (n) => {
-            /* eslint-disable-next-line */
-            return this.getRandomValues(globalThis as any, n)
-          }
-          return
-        }
-      } catch (e) {
-        // Polyfill not available - provide helpful error
-        this._rand = (): never => {
-          throw new Error(
-            'React Native detected but crypto is not available. ' +
-            'Please install and import "react-native-get-random-values" at the top of your entry file:\n' +
-            'npm install react-native-get-random-values\n' +
-            'Then add: import "react-native-get-random-values" to your index.js/App.js'
-          )
-        }
-        return
-      }
-    }
-
     // No crypto available
     this._rand = noRand
   }

package/src/primitives/SymmetricKey.ts

@@ -44,12 +44,7 @@ export default class SymmetricKey extends BigNumber {
     const iv = Random(32)
     msg = toArray(msg, enc)
     const keyBytes = this.toArray('be', 32)
-    const { result, authenticationTag } = AESGCM(
-      msg,
-      [],
-      iv,
-      keyBytes
-    )
+    const { result, authenticationTag } = AESGCM(msg, [], iv, keyBytes)
     const totalLength = iv.length + result.length + authenticationTag.length
     const combined = new Array(totalLength)
     let offset = 0
@@ -79,10 +74,23 @@ export default class SymmetricKey extends BigNumber {
    */
   decrypt (msg: number[] | string, enc?: 'hex' | 'utf8'): string | number[] {
     msg = toArray(msg, enc)
-    const iv = msg.slice(0, 32)
-    const tagStart = msg.length - 16
-    const ciphertext = msg.slice(32, tagStart)
+
+    const ivLength = 32
+    const tagLength = 16
+
+    if (msg.length < ivLength + tagLength) {
+      throw new Error('Ciphertext too short')
+    }
+
+    const iv = msg.slice(0, ivLength)
+    const tagStart = msg.length - tagLength
+    const ciphertext = msg.slice(ivLength, tagStart)
     const messageTag = msg.slice(tagStart)
+
+    if (tagStart < ivLength) {
+      throw new Error('Malformed ciphertext')
+    }
+
     const result = AESGCMDecrypt(
       ciphertext,
       [],

package/src/primitives/__tests/SymmetricKey.test.ts

@@ -102,5 +102,27 @@ describe('SymmetricKey', () => {
 
       expect(decrypted).toBe(plaintext)
     })
+    
+    it('throws "Ciphertext too short" for inputs shorter than IV + tag', () => {
+      const shortCipherArray = new Array(47).fill(0)
+      expect(() => {
+        KEYS[0].decrypt(shortCipherArray)
+      }).toThrow(new Error('Ciphertext too short'))
+    })
+
+    it('throws "Ciphertext too short" for hex-encoded inputs shorter than IV + tag', () => {
+      const shortBuffer = Buffer.alloc(47, 0)
+      const shortHex = shortBuffer.toString('hex')
+
+      expect(() => {
+        KEYS[0].decrypt(shortHex, 'hex')
+      }).toThrow(new Error('Ciphertext too short'))
+    })
+
+    it('still throws "Decryption failed!" for structurally valid but wrong ciphertext', () => {
+      expect(() => {
+        KEYS[2].decrypt(CIPHERTEXT_1, 'hex')
+      }).toThrow(new Error('Decryption failed!'))
+    })
   })
 })