cyberchef 11.1.0 → 11.3.0

package/tests/operations/tests/ExtendedGCD.mjs

@@ -0,0 +1,78 @@
+/**
+ * Extended GCD tests.
+ *
+ * @author p-leriche [philip.leriche@cantab.net]
+ *
+ * @copyright Crown Copyright 2025
+ * @license Apache-2.0
+ */
+import TestRegister from "../../lib/TestRegister.mjs";
+
+TestRegister.addTests([
+    {
+        name: "Extended GCD: coprime numbers (3, 11)",
+        input: "",
+        expectedOutput: "gcd: 1\n\nBezout coefficients:\nx = 4\ny = -1\n\n",
+        recipeConfig: [
+            {
+                op: "Extended GCD",
+                args: ["3", "11"],
+            },
+        ],
+    },
+    {
+        name: "Extended GCD: non-coprime numbers (240, 46)",
+        input: "",
+        expectedOutput: "gcd: 2\n\nBezout coefficients:\nx = -9\ny = 47\n\n",
+        recipeConfig: [
+            {
+                op: "Extended GCD",
+                args: ["240", "46"],
+            },
+        ],
+    },
+    {
+        name: "Extended GCD: with zero (17, 0)",
+        input: "",
+        expectedOutput: "gcd: 17\n\nBezout coefficients:\nx = 1\ny = 0\n\n",
+        recipeConfig: [
+            {
+                op: "Extended GCD",
+                args: ["17", "0"],
+            },
+        ],
+    },
+    {
+        name: "Extended GCD: hexadecimal input (0xFF, 0x11)",
+        input: "",
+        expectedOutput: "gcd: 17\n\nBezout coefficients:\nx = 0\ny = 1\n\n",
+        recipeConfig: [
+            {
+                op: "Extended GCD",
+                args: ["0xFF", "0x11"],
+            },
+        ],
+    },
+    {
+        name: "Extended GCD: using input field for value a",
+        input: "42",
+        expectedOutput: "gcd: 7\n\nBezout coefficients:\nx = 1\ny = -1\n\n",
+        recipeConfig: [
+            {
+                op: "Extended GCD",
+                args: ["", "35"],
+            },
+        ],
+    },
+    {
+        name: "Extended GCD: large numbers",
+        input: "",
+        expectedOutput: "gcd: 2\n\nBezout coefficients:\nx = 12703973750415151\ny = -1577756566311408967124629843\n\n",
+        recipeConfig: [
+            {
+                op: "Extended GCD",
+                args: ["123456789012345678901234567890", "994064509324197316"],
+            },
+        ],
+    },
+]);

package/tests/operations/tests/FromBase.mjs

@@ -0,0 +1,66 @@
+/**
+ * From Base operation tests.
+ *
+ * @author Willi Ballenthin
+ * @copyright Crown Copyright 2026
+ * @license Apache-2.0
+ */
+import TestRegister from "../../lib/TestRegister.mjs";
+
+TestRegister.addTests([
+    {
+        name: "From Base: binary integer",
+        input: "1010",
+        expectedOutput: "10",
+        recipeConfig: [
+            {
+                op: "From Base",
+                args: [2],
+            },
+        ],
+    },
+    {
+        name: "From Base: binary fraction",
+        input: "10.1",
+        expectedOutput: "2.5",
+        recipeConfig: [
+            {
+                op: "From Base",
+                args: [2],
+            },
+        ],
+    },
+    {
+        name: "From Base: hex fraction",
+        input: "a.8",
+        expectedOutput: "10.5",
+        recipeConfig: [
+            {
+                op: "From Base",
+                args: [16],
+            },
+        ],
+    },
+    {
+        name: "From Base: octal integer",
+        input: "77",
+        expectedOutput: "63",
+        recipeConfig: [
+            {
+                op: "From Base",
+                args: [8],
+            },
+        ],
+    },
+    {
+        name: "From Base: octal fraction",
+        input: "7.4",
+        expectedOutput: "7.5",
+        recipeConfig: [
+            {
+                op: "From Base",
+                args: [8],
+            },
+        ],
+    },
+]);

package/tests/operations/tests/FromDecimal.mjs

@@ -30,4 +30,59 @@ TestRegister.addTests([
             },
         ],
     },
+    {
+        name: "From Decimal with Auto delimiter (space)",
+        input: "72 101 108 108 111",
+        expectedOutput: "Hello",
+        recipeConfig: [
+            {
+                op: "From Decimal",
+                args: ["Auto", false]
+            },
+        ],
+    },
+    {
+        name: "From Decimal with Auto delimiter (comma)",
+        input: "72,101,108,108,111",
+        expectedOutput: "Hello",
+        recipeConfig: [
+            {
+                op: "From Decimal",
+                args: ["Auto", false]
+            },
+        ],
+    },
+    {
+        name: "From Decimal with Auto delimiter (mixed)",
+        input: "72, 101 : 108; 108\t111",
+        expectedOutput: "Hello",
+        recipeConfig: [
+            {
+                op: "From Decimal",
+                args: ["Auto", false]
+            },
+        ],
+    },
+    {
+        name: "From Decimal with Auto delimiter (newline)",
+        input: "72\n101\n108\n108\n111",
+        expectedOutput: "Hello",
+        recipeConfig: [
+            {
+                op: "From Decimal",
+                args: ["Auto", false]
+            },
+        ],
+    },
+    {
+        name: "From Decimal with Auto delimiter and signed values",
+        input: "-130 -140 -152 -151 115 33 0 -1",
+        expectedOutput: "~this!\u0000\u00ff",
+        recipeConfig: [
+            {
+                op: "From Decimal",
+                args: ["Auto", true]
+            },
+        ],
+    },
 ]);

package/tests/operations/tests/GenerateLoremIpsum.mjs

@@ -67,12 +67,12 @@ TestRegister.addTests([
     {
         name: "Generate Lorem Ipsum: Incorrect lengthType",
         input: "",
-        expectedOutput: "Invalid length type",
+        expectedOutput: "Length in must be one of the following: Paragraphs, Sentences, Words, Bytes.",
         recipeConfig: [
             {
                 "op": "Generate Lorem Ipsum",
                 "args": [999_999, "Novels"]
-            },
+            }
         ],
     },
 

package/tests/operations/tests/Gzip.mjs

@@ -86,4 +86,64 @@ TestRegister.addTests([
             }
         ]
     },
+    {
+        name: "Gzip: Comment with checksum round-trips through Gunzip",
+        input: "hello hello hello",
+        expectedOutput: "hello hello hello",
+        recipeConfig: [
+            {
+                op: "Gzip",
+                args: ["Dynamic Huffman Coding", "", "test", true]
+            },
+            {
+                op: "Gunzip",
+                args: []
+            }
+        ]
+    },
+    {
+        name: "Gzip: Filename and comment with checksum round-trips through Gunzip",
+        input: "The quick brown fox jumped over the slow dog",
+        expectedOutput: "The quick brown fox jumped over the slow dog",
+        recipeConfig: [
+            {
+                op: "Gzip",
+                args: ["Dynamic Huffman Coding", "file.txt", "a comment", true]
+            },
+            {
+                op: "Gunzip",
+                args: []
+            }
+        ]
+    },
+    {
+        name: "Gzip: No comment, with checksum round-trips through Gunzip",
+        input: "The quick brown fox jumped over the slow dog",
+        expectedOutput: "The quick brown fox jumped over the slow dog",
+        recipeConfig: [
+            {
+                op: "Gzip",
+                args: ["Dynamic Huffman Coding", "", "", true]
+            },
+            {
+                op: "Gunzip",
+                args: []
+            }
+        ]
+    },
+    {
+        name: "Gzip: No options round-trips through Gunzip",
+        input: "The quick brown fox jumped over the slow dog",
+        expectedOutput: "The quick brown fox jumped over the slow dog",
+        recipeConfig: [
+            {
+                op: "Gzip",
+                args: ["Dynamic Huffman Coding", "", "", false]
+            },
+            {
+                op: "Gunzip",
+                args: []
+            }
+        ]
+    },
 ]);

package/tests/operations/tests/HTMLEntity.mjs

@@ -0,0 +1,126 @@
+/**
+ * To/From HTML Entity tests.
+ *
+ * @author roberson-io [michaelroberson@gmail.com]
+ * @copyright Crown Copyright 2026
+ * @license Apache-2.0
+ */
+import TestRegister from "../../lib/TestRegister.mjs";
+
+TestRegister.addTests([
+    {
+        name: "To HTML Entity: named",
+        input: "<a href='#'>\"&\"</a>",
+        expectedOutput: "&lt;a href&equals;&apos;&num;&apos;&gt;&quot;&amp;&quot;&lt;&sol;a&gt;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [false, "Named entities"] },
+        ],
+    },
+    {
+        // Regression: this value was "&rlhar;;" (stray trailing semicolon) in the
+        // original byteToEntity table. See issue #2645.
+        name: "To HTML Entity: malformed value fixed (U+21CC)",
+        input: "⇌",
+        expectedOutput: "&rlhar;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [false, "Named entities"] },
+        ],
+    },
+    {
+        // Regression: U+03F5 emitted "&epsi;," before; the spec name is &epsiv;
+        // (&epsi; is U+03B5). See issue #2645.
+        name: "To HTML Entity: spec-conformant name (U+03F5)",
+        input: "ϵ",
+        expectedOutput: "&epsiv;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [false, "Named entities"] },
+        ],
+    },
+    {
+        // Regression: the OHM SIGN previously emitted the non-conformant &ohm;
+        // (spec &ohm; is U+03A9). It now encodes numerically.
+        name: "To HTML Entity: non-conformant name dropped (U+2126 ohm sign)",
+        input: "Ω",
+        expectedOutput: "&#8486;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [false, "Named entities"] },
+        ],
+    },
+    {
+        // The FULL BLOCK previously decoded to &block; but never encoded to it.
+        // Generating both tables from the spec fixes this asymmetry.
+        name: "To HTML Entity: encode/decode symmetry (U+2588 block)",
+        input: "█",
+        expectedOutput: "&block;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [false, "Named entities"] },
+        ],
+    },
+    {
+        name: "To HTML Entity: numeric, convert all",
+        input: "A<",
+        expectedOutput: "&#65;&#60;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [true, "Numeric entities"] },
+        ],
+    },
+    {
+        name: "To HTML Entity: hex, convert all",
+        input: "A<",
+        expectedOutput: "&#x41;&#x3c;",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [true, "Hex entities"] },
+        ],
+    },
+    {
+        name: "From HTML Entity: named",
+        input: "&lt;a href=&apos;#&apos;&gt;&quot;&amp;&quot;&lt;/a&gt;",
+        expectedOutput: "<a href='#'>\"&\"</a>",
+        recipeConfig: [
+            { op: "From HTML Entity", args: [] },
+        ],
+    },
+    {
+        // Legacy/alias names still decode, now to the spec code point.
+        name: "From HTML Entity: alias to spec code point (&ohm;)",
+        input: "&ohm;",
+        expectedOutput: "Ω",
+        recipeConfig: [
+            { op: "From HTML Entity", args: [] },
+        ],
+    },
+    {
+        name: "From HTML Entity: decimal numeric entity",
+        input: "&#65;",
+        expectedOutput: "A",
+        recipeConfig: [
+            { op: "From HTML Entity", args: [] },
+        ],
+    },
+    {
+        name: "From HTML Entity: hex numeric entity",
+        input: "&#x41;",
+        expectedOutput: "A",
+        recipeConfig: [
+            { op: "From HTML Entity", args: [] },
+        ],
+    },
+    {
+        // Unknown entities are passed through unchanged.
+        name: "From HTML Entity: invalid entity passed through",
+        input: "a &notreal; b",
+        expectedOutput: "a &notreal; b",
+        recipeConfig: [
+            { op: "From HTML Entity", args: [] },
+        ],
+    },
+    {
+        name: "HTML Entity: round-trips through both operations",
+        input: "Hello <World> & \"friends\" — ⇌ █",
+        expectedOutput: "Hello <World> & \"friends\" — ⇌ █",
+        recipeConfig: [
+            { op: "To HTML Entity", args: [true, "Named entities"] },
+            { op: "From HTML Entity", args: [] },
+        ],
+    },
+]);

package/tests/operations/tests/Hash.mjs

@@ -722,6 +722,39 @@ TestRegister.addTests([
             }
         ]
     },
+    {
+        name: "HMAC: Decimal key space-delimited matches Latin1 key (fromDecimal Auto delimiter regression)",
+        input: "Hello, World!",
+        expectedOutput: "9b641a008211bb0464a10899d5b37a24ab08ffcf839f5e74d17d99f856530957",
+        recipeConfig: [
+            {
+                "op": "HMAC",
+                "args": [{"option": "Decimal", "string": "65 65"}, "SHA256"]
+            }
+        ]
+    },
+    {
+        name: "HMAC: Latin1 key matches space-delimited Decimal key (fromDecimal Auto delimiter regression)",
+        input: "Hello, World!",
+        expectedOutput: "9b641a008211bb0464a10899d5b37a24ab08ffcf839f5e74d17d99f856530957",
+        recipeConfig: [
+            {
+                "op": "HMAC",
+                "args": [{"option": "Latin1", "string": "AA"}, "SHA256"]
+            }
+        ]
+    },
+    {
+        name: "HMAC: Decimal key comma-delimited matches Latin1 key (fromDecimal Auto delimiter regression)",
+        input: "Hello, World!",
+        expectedOutput: "9b641a008211bb0464a10899d5b37a24ab08ffcf839f5e74d17d99f856530957",
+        recipeConfig: [
+            {
+                "op": "HMAC",
+                "args": [{"option": "Decimal", "string": "65,65"}, "SHA256"]
+            }
+        ]
+    },
     {
         name: "MD5: Complex bytes",
         input: "10dc10e32010de10d010dc10d810d910d010e12e",
@@ -993,6 +1026,17 @@ TestRegister.addTests([
             }
         ]
     },
+    {
+        name: "Bcrypt compare: invalid salt version",
+        input: "password",
+        expectedOutput: "Error: Invalid salt version: $a",
+        recipeConfig: [
+            {
+                op: "Bcrypt compare",
+                args: ["$ab$04$K.H1WlFDQ/iIo/PiprT/puwluJ5rzuSE5q8D/Fk3NuLgU2aXiGR9m"]
+            }
+        ]
+    },
     {
         name: "Scrypt: RFC test vector 1",
         input: "",

package/tests/operations/tests/Hexdump.mjs

@@ -126,6 +126,17 @@ TestRegister.addTests([
             }
         ],
     },
+    {
+        name: "To Hexdump: Width too large",
+        input: "H",
+        expectedOutput: "Width must be less than or equal to 65536.",
+        recipeConfig: [
+            {
+                op: "To Hexdump",
+                args: [155555555555555, false, false, false]
+            }
+        ],
+    },
     {
         name: "From Hexdump: xxd",
         input: `00000000: 0001 0203 0405 0607 0809 0a0b 0c0d 0e0f  ................

package/tests/operations/tests/Image.mjs

@@ -45,6 +45,17 @@ TestRegister.addTests([
             { op: "Render Image", args: ["Base64"] }
         ]
     },
+    {
+        name: "Generate Image: empty mode",
+        input: "",
+        expectedOutput: "Mode cannot be empty.",
+        recipeConfig: [
+            {
+                op: "Generate Image",
+                args: ["", 8, 64]
+            }
+        ]
+    },
     {
         name: "Extract EXIF: nothing",
         input: "",
@@ -230,6 +241,21 @@ TestRegister.addTests([
             }
         ]
     },
+    {
+        name: "View Bit Plane: malformed PNG",
+        input: PNG_HEX.replace("49484452", "49424452"),
+        expectedOutput: "Error loading image. (Error: unrecognised content at end of stream)",
+        recipeConfig: [
+            {
+                op: "From Hex",
+                args: ["None"]
+            },
+            {
+                op: "View Bit Plane",
+                args: ["Red", 0]
+            }
+        ]
+    },
     {
         name: "Randomize Colour Palette",
         "input": PNG_HEX,

package/tests/operations/tests/Jsonata.mjs

@@ -548,4 +548,27 @@ TestRegister.addTests([
             },
         ],
     },
+    // Base64 functions (issue #2063)
+    {
+        name: "Jsonata: $base64decode",
+        input: "{}",
+        expectedOutput: '"Hello World!"',
+        recipeConfig: [
+            {
+                op: "Jsonata Query",
+                args: ['$base64decode("SGVsbG8gV29ybGQh")'],
+            },
+        ],
+    },
+    {
+        name: "Jsonata: $base64encode",
+        input: "{}",
+        expectedOutput: '"SGVsbG8gV29ybGQh"',
+        recipeConfig: [
+            {
+                op: "Jsonata Query",
+                args: ['$base64encode("Hello World!")'],
+            },
+        ],
+    },
 ]);

package/tests/operations/tests/MIMEDecoding.mjs

@@ -75,6 +75,39 @@ TestRegister.addTests([
             }
         ]
     },
+    {
+        name: "UTF-8 Base64 non-ASCII",
+        input: "Subject: =?UTF-8?B?Y2Fmw6k=?=",
+        expectedOutput: "Subject: café",
+        recipeConfig: [
+            {
+                "op": "MIME Decoding",
+                "args": []
+            }
+        ]
+    },
+    {
+        name: "UTF-8 Base64 multibyte CJK",
+        input: "Subject: =?UTF-8?B?5pel5pys6Kqe?=",
+        expectedOutput: "Subject: 日本語",
+        recipeConfig: [
+            {
+                "op": "MIME Decoding",
+                "args": []
+            }
+        ]
+    },
+    {
+        name: "UTF-8 Base64 ASCII-only",
+        input: "Subject: =?UTF-8?B?aGVsbG8=?=",
+        expectedOutput: "Subject: hello",
+        recipeConfig: [
+            {
+                "op": "MIME Decoding",
+                "args": []
+            }
+        ]
+    },
     {
         name: "ISO Decoding",
         input: "From: =?US-ASCII?Q?Keith_Moore?= <moore@cs.utk.edu>\nTo: =?ISO-8859-1?Q?Keld_J=F8rn_Simonsen?= <keld@dkuug.dk>\nCC: =?ISO-8859-1?Q?Andr=E9?= Pirard <PIRARD@vm1.ulg.ac.be>\nSubject: =?ISO-8859-1?B?SWYgeW91IGNhbiByZWFkIHRoaXMgeW8=?=\n=?ISO-8859-2?B?dSB1bmRlcnN0YW5kIHRoZSBleGFtcGxlLg==?=",