pptx-viewer-core 1.3.0 → 1.3.1

package/CHANGELOG.md

@@ -4,6 +4,12 @@ All notable changes to this project are documented here.
 This file is generated from [Conventional Commits](https://www.conventionalcommits.org)
 by [git-cliff](https://git-cliff.org); do not edit it by hand.
 
+## [1.3.0](https://github.com/ChristopherVR/pptx-viewer/releases/tag/pptx-viewer-core@1.3.0) - 2026-07-11
+
+### Other
+
+- Reconcile with origin/main before push (by @ChristopherVR) ([0ecd3d9](https://github.com/ChristopherVR/pptx-viewer/commit/0ecd3d935f97c78e8b0a62bebc8bf610c42414ab))
+
 ## [1.2.8](https://github.com/ChristopherVR/pptx-viewer/releases/tag/pptx-viewer-core@1.2.8) - 2026-07-10
 
 ## [1.2.7](https://github.com/ChristopherVR/pptx-viewer/releases/tag/pptx-viewer-core@1.2.7) - 2026-07-09

package/dist/index.d.mts

@@ -2958,7 +2958,7 @@ declare function hasNonTrivialOverride(override: Record<string, string> | null |
  * (which indicates an encrypted OOXML package) rather than a normal ZIP.
  *
  * Encrypted OOXML files are wrapped in OLE structured storage format.
- * The OLE magic bytes are: D0 CF 11 E0 A1 1B 1A E1
+ * The OLE magic bytes are: D0 CF 11 E0 A1 B1 1A E1
  * Normal PPTX files start with ZIP magic: 50 4B (PK)
  */
 type FileFormatDetection = {

package/dist/index.d.ts

@@ -2958,7 +2958,7 @@ declare function hasNonTrivialOverride(override: Record<string, string> | null |
  * (which indicates an encrypted OOXML package) rather than a normal ZIP.
  *
  * Encrypted OOXML files are wrapped in OLE structured storage format.
- * The OLE magic bytes are: D0 CF 11 E0 A1 1B 1A E1
+ * The OLE magic bytes are: D0 CF 11 E0 A1 B1 1A E1
  * Normal PPTX files start with ZIP magic: 50 4B (PK)
  */
 type FileFormatDetection = {

package/dist/index.js

@@ -12801,7 +12801,7 @@ function stripParentDirSegments(path) {
 }
 
 // src/core/utils/ole2-parser-types.ts
-var OLE_MAGIC = new Uint8Array([208, 207, 17, 224, 161, 27, 26, 225]);
+var OLE_MAGIC = new Uint8Array([208, 207, 17, 224, 161, 177, 26, 225]);
 var ENDOFCHAIN = 4294967294;
 var FREESECT = 4294967295;
 var FATSECT = 4294967293;
@@ -19333,7 +19333,7 @@ function resolveLayoutCategory(layoutType) {
 }
 
 // src/core/utils/encryption-detection.ts
-var OLE_MAGIC2 = new Uint8Array([208, 207, 17, 224, 161, 27, 26, 225]);
+var OLE_MAGIC2 = new Uint8Array([208, 207, 17, 224, 161, 177, 26, 225]);
 var ZIP_MAGIC = new Uint8Array([80, 75]);
 function detectFileFormat(data) {
   if (data.byteLength < 8) {
@@ -20027,15 +20027,9 @@ async function verifyAgilePassword(info, password) {
     pke.keyBits,
     pke.hashSize
   );
-  const iv1 = generateIV(
-    pke.hashAlgorithm,
-    pke.saltValue,
-    BLOCK_KEYS.verifierHashInput,
-    pke.blockSize
-  );
   const verifierHashInput = await aesCbcDecryptRaw(
     verifierInputKey,
-    await iv1,
+    pke.saltValue,
     pke.encryptedVerifierHashInput
   );
   const verifierHashKey = await deriveAgileKey(
@@ -20047,15 +20041,9 @@ async function verifyAgilePassword(info, password) {
     pke.keyBits,
     pke.hashSize
   );
-  const iv2 = generateIV(
-    pke.hashAlgorithm,
-    pke.saltValue,
-    BLOCK_KEYS.verifierHashValue,
-    pke.blockSize
-  );
   const verifierHashValue = await aesCbcDecryptRaw(
     verifierHashKey,
-    await iv2,
+    pke.saltValue,
     pke.encryptedVerifierHashValue
   );
   const computedHash = await hash(pke.hashAlgorithm, verifierHashInput.subarray(0, pke.saltSize));
@@ -20080,13 +20068,7 @@ async function verifyAgilePassword(info, password) {
     pke.keyBits,
     pke.hashSize
   );
-  const iv3 = await generateIV(
-    pke.hashAlgorithm,
-    pke.saltValue,
-    BLOCK_KEYS.encryptedKeyValue,
-    pke.blockSize
-  );
-  const decryptedKey = await aesCbcDecryptRaw(encKeyKey, iv3, pke.encryptedKeyValue);
+  const decryptedKey = await aesCbcDecryptRaw(encKeyKey, pke.saltValue, pke.encryptedKeyValue);
   return decryptedKey.subarray(0, info.keyData.keyBits / 8);
 }
 async function verifyStandardPassword(info, password) {
@@ -20139,8 +20121,7 @@ async function verifyAgileDataIntegrity(info, key, encryptedPackage) {
     info.dataIntegrity.encryptedHmacValue
   );
   const expectedHmac = decryptedHmacValue.subarray(0, keyData.hashSize);
-  const encryptedContent = encryptedPackage.subarray(8);
-  const computedHmac = await hmac(keyData.hashAlgorithm, hmacKey, encryptedContent);
+  const computedHmac = await hmac(keyData.hashAlgorithm, hmacKey, encryptedPackage);
   let match = true;
   if (computedHmac.length < keyData.hashSize) {
     match = false;
@@ -20294,14 +20275,13 @@ async function encryptPptx(pptxBuffer, password, options) {
     keyBits,
     hashSize
   );
-  const iv1 = await generateIV(hashAlgorithm, pkeSalt, BLOCK_KEYS.verifierHashInput, blockSize);
   const paddedVerifierInput = new Uint8Array(
     Math.ceil(verifierHashInput.length / blockSize) * blockSize
   );
   paddedVerifierInput.set(verifierHashInput);
   const encryptedVerifierHashInput = await aesCbcEncryptNoPad(
     verifierInputKey,
-    iv1,
+    pkeSalt,
     paddedVerifierInput
   );
   const verifierHashKey = await deriveAgileKey(
@@ -20313,12 +20293,11 @@ async function encryptPptx(pptxBuffer, password, options) {
     keyBits,
     hashSize
   );
-  const iv2 = await generateIV(hashAlgorithm, pkeSalt, BLOCK_KEYS.verifierHashValue, blockSize);
   const paddedVerifierHash = new Uint8Array(Math.ceil(verifierHash.length / blockSize) * blockSize);
   paddedVerifierHash.set(verifierHash);
   const encryptedVerifierHashValue = await aesCbcEncryptNoPad(
     verifierHashKey,
-    iv2,
+    pkeSalt,
     paddedVerifierHash
   );
   const encKeyKey = await deriveAgileKey(
@@ -20330,10 +20309,9 @@ async function encryptPptx(pptxBuffer, password, options) {
     keyBits,
     hashSize
   );
-  const iv3 = await generateIV(hashAlgorithm, pkeSalt, BLOCK_KEYS.encryptedKeyValue, blockSize);
   const paddedDocumentKey = new Uint8Array(Math.ceil(documentKey.length / blockSize) * blockSize);
   paddedDocumentKey.set(documentKey);
-  const encryptedKeyValue = await aesCbcEncryptNoPad(encKeyKey, iv3, paddedDocumentKey);
+  const encryptedKeyValue = await aesCbcEncryptNoPad(encKeyKey, pkeSalt, paddedDocumentKey);
   const encInfo = {
     keyData: {
       saltSize: 16,
@@ -20369,7 +20347,7 @@ async function encryptPptx(pptxBuffer, password, options) {
   const encryptedPackage = await encryptAgilePackage(packageData, documentKey, encInfo);
   const hmacKeyRandom = new Uint8Array(hashSize);
   crypto2.getRandomValues(hmacKeyRandom);
-  const hmacValue = await hmac(hashAlgorithm, hmacKeyRandom, encryptedPackage.subarray(8));
+  const hmacValue = await hmac(hashAlgorithm, hmacKeyRandom, encryptedPackage);
   const hmacKeyIV = await generateIV(
     hashAlgorithm,
     keyDataSalt,

package/dist/index.mjs

@@ -12796,7 +12796,7 @@ function stripParentDirSegments(path) {
 }
 
 // src/core/utils/ole2-parser-types.ts
-var OLE_MAGIC = new Uint8Array([208, 207, 17, 224, 161, 27, 26, 225]);
+var OLE_MAGIC = new Uint8Array([208, 207, 17, 224, 161, 177, 26, 225]);
 var ENDOFCHAIN = 4294967294;
 var FREESECT = 4294967295;
 var FATSECT = 4294967293;
@@ -19328,7 +19328,7 @@ function resolveLayoutCategory(layoutType) {
 }
 
 // src/core/utils/encryption-detection.ts
-var OLE_MAGIC2 = new Uint8Array([208, 207, 17, 224, 161, 27, 26, 225]);
+var OLE_MAGIC2 = new Uint8Array([208, 207, 17, 224, 161, 177, 26, 225]);
 var ZIP_MAGIC = new Uint8Array([80, 75]);
 function detectFileFormat(data) {
   if (data.byteLength < 8) {
@@ -20022,15 +20022,9 @@ async function verifyAgilePassword(info, password) {
     pke.keyBits,
     pke.hashSize
   );
-  const iv1 = generateIV(
-    pke.hashAlgorithm,
-    pke.saltValue,
-    BLOCK_KEYS.verifierHashInput,
-    pke.blockSize
-  );
   const verifierHashInput = await aesCbcDecryptRaw(
     verifierInputKey,
-    await iv1,
+    pke.saltValue,
     pke.encryptedVerifierHashInput
   );
   const verifierHashKey = await deriveAgileKey(
@@ -20042,15 +20036,9 @@ async function verifyAgilePassword(info, password) {
     pke.keyBits,
     pke.hashSize
   );
-  const iv2 = generateIV(
-    pke.hashAlgorithm,
-    pke.saltValue,
-    BLOCK_KEYS.verifierHashValue,
-    pke.blockSize
-  );
   const verifierHashValue = await aesCbcDecryptRaw(
     verifierHashKey,
-    await iv2,
+    pke.saltValue,
     pke.encryptedVerifierHashValue
   );
   const computedHash = await hash(pke.hashAlgorithm, verifierHashInput.subarray(0, pke.saltSize));
@@ -20075,13 +20063,7 @@ async function verifyAgilePassword(info, password) {
     pke.keyBits,
     pke.hashSize
   );
-  const iv3 = await generateIV(
-    pke.hashAlgorithm,
-    pke.saltValue,
-    BLOCK_KEYS.encryptedKeyValue,
-    pke.blockSize
-  );
-  const decryptedKey = await aesCbcDecryptRaw(encKeyKey, iv3, pke.encryptedKeyValue);
+  const decryptedKey = await aesCbcDecryptRaw(encKeyKey, pke.saltValue, pke.encryptedKeyValue);
   return decryptedKey.subarray(0, info.keyData.keyBits / 8);
 }
 async function verifyStandardPassword(info, password) {
@@ -20134,8 +20116,7 @@ async function verifyAgileDataIntegrity(info, key, encryptedPackage) {
     info.dataIntegrity.encryptedHmacValue
   );
   const expectedHmac = decryptedHmacValue.subarray(0, keyData.hashSize);
-  const encryptedContent = encryptedPackage.subarray(8);
-  const computedHmac = await hmac(keyData.hashAlgorithm, hmacKey, encryptedContent);
+  const computedHmac = await hmac(keyData.hashAlgorithm, hmacKey, encryptedPackage);
   let match = true;
   if (computedHmac.length < keyData.hashSize) {
     match = false;
@@ -20289,14 +20270,13 @@ async function encryptPptx(pptxBuffer, password, options) {
     keyBits,
     hashSize
   );
-  const iv1 = await generateIV(hashAlgorithm, pkeSalt, BLOCK_KEYS.verifierHashInput, blockSize);
   const paddedVerifierInput = new Uint8Array(
     Math.ceil(verifierHashInput.length / blockSize) * blockSize
   );
   paddedVerifierInput.set(verifierHashInput);
   const encryptedVerifierHashInput = await aesCbcEncryptNoPad(
     verifierInputKey,
-    iv1,
+    pkeSalt,
     paddedVerifierInput
   );
   const verifierHashKey = await deriveAgileKey(
@@ -20308,12 +20288,11 @@ async function encryptPptx(pptxBuffer, password, options) {
     keyBits,
     hashSize
   );
-  const iv2 = await generateIV(hashAlgorithm, pkeSalt, BLOCK_KEYS.verifierHashValue, blockSize);
   const paddedVerifierHash = new Uint8Array(Math.ceil(verifierHash.length / blockSize) * blockSize);
   paddedVerifierHash.set(verifierHash);
   const encryptedVerifierHashValue = await aesCbcEncryptNoPad(
     verifierHashKey,
-    iv2,
+    pkeSalt,
     paddedVerifierHash
   );
   const encKeyKey = await deriveAgileKey(
@@ -20325,10 +20304,9 @@ async function encryptPptx(pptxBuffer, password, options) {
     keyBits,
     hashSize
   );
-  const iv3 = await generateIV(hashAlgorithm, pkeSalt, BLOCK_KEYS.encryptedKeyValue, blockSize);
   const paddedDocumentKey = new Uint8Array(Math.ceil(documentKey.length / blockSize) * blockSize);
   paddedDocumentKey.set(documentKey);
-  const encryptedKeyValue = await aesCbcEncryptNoPad(encKeyKey, iv3, paddedDocumentKey);
+  const encryptedKeyValue = await aesCbcEncryptNoPad(encKeyKey, pkeSalt, paddedDocumentKey);
   const encInfo = {
     keyData: {
       saltSize: 16,
@@ -20364,7 +20342,7 @@ async function encryptPptx(pptxBuffer, password, options) {
   const encryptedPackage = await encryptAgilePackage(packageData, documentKey, encInfo);
   const hmacKeyRandom = new Uint8Array(hashSize);
   crypto2.getRandomValues(hmacKeyRandom);
-  const hmacValue = await hmac(hashAlgorithm, hmacKeyRandom, encryptedPackage.subarray(8));
+  const hmacValue = await hmac(hashAlgorithm, hmacKeyRandom, encryptedPackage);
   const hmacKeyIV = await generateIV(
     hashAlgorithm,
     keyDataSalt,

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "pptx-viewer-core",
-	"version": "1.3.0",
+	"version": "1.3.1",
 	"description": "PowerPoint PPTX engine: parse, edit, serialize, and convert .pptx files. Framework-agnostic TypeScript SDK.",
 	"keywords": [
 		"angular",