electron-incremental-update 0.5.0 → 0.5.1

package/dist/{chunk-SSJ6PDMK.mjs → chunk-OBERMV66.mjs}

@@ -31,22 +31,21 @@ function decrypt(encryptedText, key, iv) {
   decrypted += decipher.final("utf8");
   return decrypted;
 }
-function generateKey(buffer, str, length) {
-  str += createHash("md5").update(buffer.map((v, i) => i & length / 4 && v)).digest("hex");
-  const hash = createHash("SHA256").update(str).digest("binary");
+function generateKey(data, length) {
+  const hash = createHash("SHA256").update(data).digest("binary");
   return Buffer2.from(hash).subarray(0, length);
 }
-function signature(buffer, privateKey, publicKey, name) {
+function signature(buffer, privateKey, publicKey) {
   const sig = createSign("RSA-SHA256").update(buffer).sign({
     key: privateKey,
     padding: constants.RSA_PKCS1_PADDING,
     saltLength: constants.RSA_PSS_SALTLEN_DIGEST
   }, "base64");
-  return encrypt(sig, generateKey(buffer, publicKey, 32), generateKey(buffer, name, 16));
+  return encrypt(sig, generateKey(publicKey, 32), generateKey(buffer, 16));
 }
-function verify(buffer, signature2, publicKey, name) {
+function verify(buffer, signature2, publicKey) {
   try {
-    const sig = decrypt(signature2, generateKey(buffer, publicKey, 32), generateKey(buffer, name, 16));
+    const sig = decrypt(signature2, generateKey(publicKey, 32), generateKey(buffer, 16));
     return createVerify("RSA-SHA256").update(buffer).verify(publicKey, sig, "base64");
   } catch (error) {
     return false;

package/dist/index.cjs

@@ -61,14 +61,13 @@ function decrypt(encryptedText, key, iv) {
   decrypted += decipher.final("utf8");
   return decrypted;
 }
-function generateKey(buffer, str, length) {
-  str += (0, import_node_crypto.createHash)("md5").update(buffer.map((v, i) => i & length / 4 && v)).digest("hex");
-  const hash = (0, import_node_crypto.createHash)("SHA256").update(str).digest("binary");
+function generateKey(data, length) {
+  const hash = (0, import_node_crypto.createHash)("SHA256").update(data).digest("binary");
   return import_node_buffer.Buffer.from(hash).subarray(0, length);
 }
-function verify(buffer, signature, publicKey, name) {
+function verify(buffer, signature, publicKey) {
   try {
-    const sig = decrypt(signature, generateKey(buffer, publicKey, 32), generateKey(buffer, name, 16));
+    const sig = decrypt(signature, generateKey(publicKey, 32), generateKey(buffer, 16));
     return (0, import_node_crypto.createVerify)("RSA-SHA256").update(buffer).verify(publicKey, sig, "base64");
   } catch (error) {
     return false;
@@ -315,7 +314,7 @@ function createUpdater({
         src = await download(_url, "buffer");
       }
       log("verify start");
-      if (!verify(src, signature, SIGNATURE_PUB, productName)) {
+      if (!verify(src, signature, SIGNATURE_PUB)) {
         log("verify failed");
         throw new Error("invalid signature");
       }

package/dist/index.mjs

@@ -1,7 +1,7 @@
 import {
   __require,
   verify
-} from "./chunk-SSJ6PDMK.mjs";
+} from "./chunk-OBERMV66.mjs";
 
 // src/index.ts
 import { resolve } from "node:path";
@@ -254,7 +254,7 @@ function createUpdater({
         src = await download(_url, "buffer");
       }
       log("verify start");
-      if (!verify(src, signature, SIGNATURE_PUB, productName)) {
+      if (!verify(src, signature, SIGNATURE_PUB)) {
         log("verify failed");
         throw new Error("invalid signature");
       }

package/dist/vite.cjs

@@ -59,18 +59,17 @@ function encrypt(plainText, key, iv) {
   encrypted += cipher.final(aesEncode);
   return encrypted;
 }
-function generateKey(buffer, str, length) {
-  str += (0, import_node_crypto.createHash)("md5").update(buffer.map((v, i) => i & length / 4 && v)).digest("hex");
-  const hash = (0, import_node_crypto.createHash)("SHA256").update(str).digest("binary");
+function generateKey(data, length) {
+  const hash = (0, import_node_crypto.createHash)("SHA256").update(data).digest("binary");
   return import_node_buffer.Buffer.from(hash).subarray(0, length);
 }
-function signature(buffer, privateKey, publicKey, name) {
+function signature(buffer, privateKey, publicKey) {
   const sig = (0, import_node_crypto.createSign)("RSA-SHA256").update(buffer).sign({
     key: privateKey,
     padding: import_node_crypto.constants.RSA_PKCS1_PADDING,
     saltLength: import_node_crypto.constants.RSA_PSS_SALTLEN_DIGEST
   }, "base64");
-  return encrypt(sig, generateKey(buffer, publicKey, 32), generateKey(buffer, name, 16));
+  return encrypt(sig, generateKey(publicKey, 32), generateKey(buffer, 16));
 }
 
 // src/build-plugins/asar.ts
@@ -115,12 +114,11 @@ async function generateVersion({
   versionPath,
   privateKey,
   publicKey,
-  productName,
   version
 }) {
   const buffer = await (0, import_promises.readFile)(`${asarOutputPath}.gz`);
   await (0, import_promises.writeFile)(versionPath, JSON.stringify({
-    signature: signature(buffer, privateKey, publicKey, productName),
+    signature: signature(buffer, privateKey, publicKey),
     version,
     size: buffer.length
   }, null, 2));
@@ -147,7 +145,7 @@ async function buildEntry({
 var import_node_fs2 = require("fs");
 var import_node_path = require("path");
 var import_node_os = require("os");
-function generateKey2(privateKeyPath, publicKeyPath, length) {
+function generateKeyFile(privateKeyPath, publicKeyPath, length) {
   const ret = generateRSA(length);
   (0, import_node_fs2.writeFileSync)(privateKeyPath, ret.privateKey);
   (0, import_node_fs2.writeFileSync)(publicKeyPath, ret.publicKey);
@@ -188,7 +186,7 @@ function getKeys({
   !(0, import_node_fs2.existsSync)(keysDir) && (0, import_node_fs2.mkdirSync)(keysDir);
   let privateKey, publicKey;
   if (!(0, import_node_fs2.existsSync)(privateKeyPath)) {
-    const keys = generateKey2(privateKeyPath, publicKeyPath, keyLength);
+    const keys = generateKeyFile(privateKeyPath, publicKeyPath, keyLength);
     privateKey = keys.privateKey;
     publicKey = keys.publicKey;
   } else {
@@ -243,7 +241,6 @@ function parseOptions(options) {
       asarOutputPath,
       privateKey,
       publicKey,
-      productName,
       versionPath
     };
   }

package/dist/vite.mjs

@@ -1,7 +1,7 @@
 import {
   generateRSA,
   signature
-} from "./chunk-SSJ6PDMK.mjs";
+} from "./chunk-OBERMV66.mjs";
 
 // src/vite.ts
 import { createLogger } from "vite";
@@ -51,12 +51,11 @@ async function generateVersion({
   versionPath,
   privateKey,
   publicKey,
-  productName,
   version
 }) {
   const buffer = await readFile(`${asarOutputPath}.gz`);
   await writeFile(versionPath, JSON.stringify({
-    signature: signature(buffer, privateKey, publicKey, productName),
+    signature: signature(buffer, privateKey, publicKey),
     version,
     size: buffer.length
   }, null, 2));
@@ -83,7 +82,7 @@ async function buildEntry({
 import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
 import { dirname } from "node:path";
 import { EOL } from "node:os";
-function generateKey(privateKeyPath, publicKeyPath, length) {
+function generateKeyFile(privateKeyPath, publicKeyPath, length) {
   const ret = generateRSA(length);
   writeFileSync(privateKeyPath, ret.privateKey);
   writeFileSync(publicKeyPath, ret.publicKey);
@@ -124,7 +123,7 @@ function getKeys({
   !existsSync(keysDir) && mkdirSync(keysDir);
   let privateKey, publicKey;
   if (!existsSync(privateKeyPath)) {
-    const keys = generateKey(privateKeyPath, publicKeyPath, keyLength);
+    const keys = generateKeyFile(privateKeyPath, publicKeyPath, keyLength);
     privateKey = keys.privateKey;
     publicKey = keys.publicKey;
   } else {
@@ -179,7 +178,6 @@ function parseOptions(options) {
       asarOutputPath,
       privateKey,
       publicKey,
-      productName,
       versionPath
     };
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "electron-incremental-update",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "electron incremental update tools, powered by vite",
   "scripts": {
     "build": "tsup",