cnpmcore 3.58.0 → 3.58.1

package/dist/app/common/CryptoUtil.d.ts

@@ -2,5 +2,5 @@ export declare function genRSAKeys(): {
     publicKey: string;
     privateKey: string;
 };
-export declare function encryptRSA(publicKey: string, data: string): string;
-export declare function decryptRSA(privateKey: string, data: string): string;
+export declare function encryptRSA(publicKey: string, plainText: string): string;
+export declare function decryptRSA(privateKey: string, encryptedBase64: string): string;

package/dist/app/common/CryptoUtil.js

@@ -1,7 +1,11 @@
 "use strict";
+var __importDefault = (this && this.__importDefault) || function (mod) {
+    return (mod && mod.__esModule) ? mod : { "default": mod };
+};
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.decryptRSA = exports.encryptRSA = exports.genRSAKeys = void 0;
 const crypto_1 = require("crypto");
+const node_rsa_1 = __importDefault(require("node-rsa"));
 // generate rsa key pair
 function genRSAKeys() {
     const key = (0, crypto_1.generateKeyPairSync)('rsa', {
@@ -19,19 +23,21 @@ function genRSAKeys() {
 }
 exports.genRSAKeys = genRSAKeys;
 // encrypt rsa private key
-function encryptRSA(publicKey, data) {
-    return (0, crypto_1.publicEncrypt)({
-        key: publicKey,
-        padding: crypto_1.constants.RSA_PKCS1_PADDING,
-    }, Buffer.from(data, 'utf8')).toString('base64');
+function encryptRSA(publicKey, plainText) {
+    const key = new node_rsa_1.default(publicKey, 'pkcs1-public-pem', {
+        encryptionScheme: 'pkcs1',
+        environment: 'browser',
+    });
+    return key.encrypt(plainText, 'base64');
 }
 exports.encryptRSA = encryptRSA;
 // decrypt rsa private key
-function decryptRSA(privateKey, data) {
-    return (0, crypto_1.privateDecrypt)({
-        key: privateKey,
-        padding: crypto_1.constants.RSA_PKCS1_PADDING,
-    }, Buffer.from(data, 'base64')).toString('utf8');
+function decryptRSA(privateKey, encryptedBase64) {
+    const key = new node_rsa_1.default(privateKey, 'pkcs1-private-pem', {
+        encryptionScheme: 'pkcs1',
+        environment: 'browser',
+    });
+    return key.decrypt(encryptedBase64, 'utf8');
 }
 exports.decryptRSA = decryptRSA;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cnpmcore",
-  "version": "3.58.0",
+  "version": "3.58.1",
   "description": "npm core",
   "files": [
     "dist/**/*"
@@ -60,9 +60,6 @@
     "url": "git@github.com:cnpm/cnpmcore.git"
   },
   "egg": {
-    "revert": [
-      "CVE-2023-46809"
-    ],
     "typescript": true
   },
   "keywords": [
@@ -105,6 +102,7 @@
     "lodash": "^4.17.21",
     "mime-types": "^2.1.35",
     "mysql2": "^3.9.4",
+    "node-rsa": "^1.1.1",
     "npm-package-arg": "^10.1.0",
     "oss-cnpm": "^5.0.1",
     "p-map": "^4.0.0",
@@ -126,6 +124,7 @@
     "@types/mime-types": "^2.1.1",
     "@types/mocha": "^10.0.1",
     "@types/mysql": "^2.15.21",
+    "@types/node-rsa": "^1.1.4",
     "@types/npm-package-arg": "^6.1.1",
     "@types/semver": "^7.3.12",
     "@types/tar": "^6.1.4",