@ukeyfe/react-native-nfc-litecard 1.0.5 → 1.0.6

package/dist/nfc-core.js

@@ -189,27 +189,26 @@ async function transceive(command, _timeoutMs = 2000, retryCount = 0) {
         const result = react_native_1.Platform.OS === 'ios'
             ? await react_native_nfc_manager_1.default.sendMifareCommandIOS(cmdToSend)
             : await react_native_nfc_manager_1.default.nfcAHandler.transceive(cmdToSend);
+        if (cmacSessionKey) {
+            // CmdCtr increments between command and response (datasheet §8.8.3)
+            cmacCmdCtr++;
+        }
         if (cmacSessionKey && result && result.length >= 8) {
             // Response has CMAC appended: split data and MAC
             const dataLen = result.length - 8;
             const responseData = result.slice(0, dataLen);
             const responseMac = result.slice(dataLen);
-            // Verify response CMAC (constant-time comparison)
+            // Verify response CMAC with incremented CmdCtr
             const expectedMac = computeResponseCmac(cmacSessionKey, cmacCmdCtr, responseData);
-            let macValid = true;
+            let diff = 0;
             for (let i = 0; i < 8; i++) {
-                macValid = macValid && (responseMac[i] === expectedMac[i]);
+                diff |= responseMac[i] ^ expectedMac[i];
             }
-            if (!macValid) {
+            if (diff !== 0) {
                 throw new Error('CMAC_VERIFY_FAILED');
             }
-            cmacCmdCtr++;
             return responseData;
         }
-        if (cmacSessionKey) {
-            // ACK-only response (e.g. WRITE command) — MAC replaces ACK
-            cmacCmdCtr++;
-        }
         return result;
     }
     catch (error) {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ukeyfe/react-native-nfc-litecard",
-  "version": "1.0.5",
+  "version": "1.0.6",
   "description": "NFC read/write for MIFARE Ultralight AES (LiteCard mnemonic storage)",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",