hb-nb-tools 1.1.1 → 1.1.2

package/lib/NbClient.js

@@ -8,11 +8,7 @@
 const crypto = require('crypto')
 const hbLibTools = require('hb-lib-tools')
 const { HttpClient, JsonFormatter, OptionParser } = hbLibTools
-let sodiumPlus
-try {
-  sodiumPlus = require('sodium-plus')
-} catch (error) {}
-const { CryptographyKey, SodiumPlus } = sodiumPlus || {}
+const { secretbox, randomBytes } = require('tweetnacl')
 
 class NbClient extends HttpClient {
   static get DeviceTypes () {
@@ -106,7 +102,7 @@ class NbClient extends HttpClient {
 
   constructor (params = {}) {
     const _params = {
-      encryption: sodiumPlus == null ? 'hashedToken' : 'encryptedToken',
+      encryption: 'encryptedToken',
       port: 8080,
       timeout: 5
     }
@@ -198,15 +194,15 @@ class NbClient extends HttpClient {
         const date = new Date().toISOString()
         const ts = date.slice(0, 19) + 'Z'
         if (this._params.encryption === 'encryptedToken') {
-          if (this._sodium == null) {
+          if (this._key == null) {
             const hash = crypto.createHash('sha256')
             hash.update(this._params.token)
-            this._key = new CryptographyKey(hash.digest())
-            this._sodium = await SodiumPlus.auto()
+            this._key = hash.digest()
           }
-          const rnr = await this._sodium.randombytes_uniform(10000)
-          const nonce = await this._sodium.randombytes_buf(24)
-          const ctoken = await this._sodium.crypto_secretbox([ts, rnr].join(','), nonce, this._key)
+          const rnr = crypto.randomInt(10000)
+          const nonce = Buffer.from(randomBytes(secretbox.nonceLength))
+          const message = Buffer.from([ts, rnr].join(','), 'utf-8')
+          const ctoken = Buffer.from(secretbox(message, nonce, this._key))
           suffix = separator + 'ctoken=' + ctoken.toString('hex') + '&nonce=' + nonce.toString('hex')
         } else if (this._params.encryption === 'hashedToken') { // deprecated
           const hash = crypto.createHash('sha256')

package/package.json

@@ -3,7 +3,7 @@
   "description": "Homebridge NB Tools",
   "author": "Erik Baauw",
   "license": "Apache-2.0",
-  "version": "1.1.1",
+  "version": "1.1.2",
   "keywords": [
     "nuki",
     "smart-lock",
@@ -17,10 +17,8 @@
     "node": "^18.16.0"
   },
   "dependencies": {
-    "hb-lib-tools": "~1.0.9"
-  },
-  "optionalDependencies": {
-    "sodium-plus": "~0.9.0"
+    "hb-lib-tools": "~1.0.9",
+    "tweetnacl": "~1.0.3"
   },
   "scripts": {
     "prepare": "standard",