react-native-quick-crypto 1.0.19 → 1.1.1

package/lib/module/argon2.js

@@ -12,23 +12,72 @@ function getNative() {
 }
 const ARGON2_VERSION = 0x13; // v1.3
 
+// RFC 9106 § 3.1: Argon2 input/parameter constraints.
+//   p (parallelism)   1   ≤ p ≤ 2^24 - 1
+//   T (tag length)    4   ≤ T ≤ 2^32 - 1
+//   m (memory in KiB) 8*p ≤ m ≤ 2^32 - 1
+//   t (passes)        1   ≤ t ≤ 2^32 - 1
+//   |salt| (nonce)    8   ≤ |s| ≤ 2^32 - 1
+//   v (version)       0x10 (v1.0) or 0x13 (v1.3)
+const ARGON2_MAX_U24 = 0xff_ffff;
+const ARGON2_MAX_U32 = 0xffff_ffff;
+function isUInt(value, max) {
+  return typeof value === 'number' && Number.isFinite(value) && Number.isInteger(value) && value >= 0 && value <= max;
+}
 function validateAlgorithm(algorithm) {
   if (algorithm !== 'argon2d' && algorithm !== 'argon2i' && algorithm !== 'argon2id') {
     throw new TypeError(`Unknown argon2 algorithm: ${algorithm}`);
   }
 }
+
+// Returns the resolved nonce ArrayBuffer so the caller can pass it
+// straight to native without re-resolving `params.nonce`.
+function validateArgon2Params(params, version) {
+  if (!isUInt(params.parallelism, ARGON2_MAX_U24) || params.parallelism < 1) {
+    throw new RangeError(`Invalid Argon2 parallelism: ${params.parallelism} ` + `(RFC 9106: 1 ≤ p ≤ 2^24 - 1)`);
+  }
+  if (!isUInt(params.tagLength, ARGON2_MAX_U32) || params.tagLength < 4) {
+    throw new RangeError(`Invalid Argon2 tagLength: ${params.tagLength} ` + `(RFC 9106: 4 ≤ T ≤ 2^32 - 1)`);
+  }
+  const minMemory = 8 * params.parallelism;
+  if (!isUInt(params.memory, ARGON2_MAX_U32) || params.memory < minMemory) {
+    throw new RangeError(`Invalid Argon2 memory: ${params.memory} KiB ` + `(RFC 9106: 8 * p (= ${minMemory}) ≤ m ≤ 2^32 - 1)`);
+  }
+  if (!isUInt(params.passes, ARGON2_MAX_U32) || params.passes < 1) {
+    throw new RangeError(`Invalid Argon2 passes: ${params.passes} ` + `(RFC 9106: 1 ≤ t ≤ 2^32 - 1)`);
+  }
+  if (version !== 0x10 && version !== 0x13) {
+    throw new RangeError(`Invalid Argon2 version: 0x${version.toString(16)} ` + `(RFC 9106: 0x10 or 0x13)`);
+  }
+  // Salt (nonce) must be 8..2^32 - 1 bytes — measured against the resolved
+  // ArrayBuffer because BinaryLike accepts strings whose UTF-8 length is
+  // what actually reaches OpenSSL.
+  const nonceAB = binaryLikeToArrayBuffer(params.nonce);
+  if (nonceAB.byteLength < 8 || nonceAB.byteLength > ARGON2_MAX_U32) {
+    throw new RangeError(`Invalid Argon2 nonce length: ${nonceAB.byteLength} bytes ` + `(RFC 9106: 8 ≤ |s| ≤ 2^32 - 1)`);
+  }
+  return nonceAB;
+}
 function toAB(value) {
   return binaryLikeToArrayBuffer(value);
 }
 export function argon2Sync(algorithm, params) {
   validateAlgorithm(algorithm);
   const version = params.version ?? ARGON2_VERSION;
-  const result = getNative().hashSync(algorithm, toAB(params.message), toAB(params.nonce), params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined);
+  const nonceAB = validateArgon2Params(params, version);
+  const result = getNative().hashSync(algorithm, toAB(params.message), nonceAB, params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined);
   return Buffer.from(result);
 }
 export function argon2(algorithm, params, callback) {
   validateAlgorithm(algorithm);
   const version = params.version ?? ARGON2_VERSION;
-  getNative().hash(algorithm, toAB(params.message), toAB(params.nonce), params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined).then(ab => callback(null, Buffer.from(ab))).catch(err => callback(err, Buffer.alloc(0)));
+  let nonceAB;
+  try {
+    nonceAB = validateArgon2Params(params, version);
+  } catch (err) {
+    callback(err, Buffer.alloc(0));
+    return;
+  }
+  getNative().hash(algorithm, toAB(params.message), nonceAB, params.parallelism, params.tagLength, params.memory, params.passes, version, params.secret ? toAB(params.secret) : undefined, params.associatedData ? toAB(params.associatedData) : undefined).then(ab => callback(null, Buffer.from(ab))).catch(err => callback(err, Buffer.alloc(0)));
 }
 //# sourceMappingURL=argon2.js.map

package/lib/module/argon2.js.map

@@ -1 +1 @@
-{"version":3,"names":["Buffer","NitroModules","binaryLikeToArrayBuffer","native","getNative","createHybridObject","ARGON2_VERSION","validateAlgorithm","algorithm","TypeError","toAB","value","argon2Sync","params","version","result","hashSync","message","nonce","parallelism","tagLength","memory","passes","secret","undefined","associatedData","from","argon2","callback","hash","then","ab","catch","err","alloc"],"sourceRoot":"../../src","sources":["argon2.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,uBAAuB,QAAQ,SAAS;AAGjD,IAAIC,MAAoB;AACxB,SAASC,SAASA,CAAA,EAAiB;EACjC,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGF,YAAY,CAACI,kBAAkB,CAAe,QAAQ,CAAC;EAClE;EACA,OAAOF,MAAM;AACf;AAcA,MAAMG,cAAc,GAAG,IAAI,CAAC,CAAC;;AAE7B,SAASC,iBAAiBA,CAACC,SAAiB,EAAQ;EAClD,IACEA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,UAAU,EACxB;IACA,MAAM,IAAIC,SAAS,CAAC,6BAA6BD,SAAS,EAAE,CAAC;EAC/D;AACF;AAEA,SAASE,IAAIA,CAACC,KAAiB,EAAe;EAC5C,OAAOT,uBAAuB,CAACS,KAAK,CAAC;AACvC;AAEA,OAAO,SAASC,UAAUA,CAACJ,SAAiB,EAAEK,MAAoB,EAAU;EAC1EN,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMM,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAIR,cAAc;EAChD,MAAMS,MAAM,GAAGX,SAAS,CAAC,CAAC,CAACY,QAAQ,CACjCR,SAAS,EACTE,IAAI,CAACG,MAAM,CAACI,OAAO,CAAC,EACpBP,IAAI,CAACG,MAAM,CAACK,KAAK,CAAC,EAClBL,MAAM,CAACM,WAAW,EAClBN,MAAM,CAACO,SAAS,EAChBP,MAAM,CAACQ,MAAM,EACbR,MAAM,CAACS,MAAM,EACbR,OAAO,EACPD,MAAM,CAACU,MAAM,GAAGb,IAAI,CAACG,MAAM,CAACU,MAAM,CAAC,GAAGC,SAAS,EAC/CX,MAAM,CAACY,cAAc,GAAGf,IAAI,CAACG,MAAM,CAACY,cAAc,CAAC,GAAGD,SACxD,CAAC;EACD,OAAOxB,MAAM,CAAC0B,IAAI,CAACX,MAAM,CAAC;AAC5B;AAEA,OAAO,SAASY,MAAMA,CACpBnB,SAAiB,EACjBK,MAAoB,EACpBe,QAAqD,EAC/C;EACNrB,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMM,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAIR,cAAc;EAChDF,SAAS,CAAC,CAAC,CACRyB,IAAI,CACHrB,SAAS,EACTE,IAAI,CAACG,MAAM,CAACI,OAAO,CAAC,EACpBP,IAAI,CAACG,MAAM,CAACK,KAAK,CAAC,EAClBL,MAAM,CAACM,WAAW,EAClBN,MAAM,CAACO,SAAS,EAChBP,MAAM,CAACQ,MAAM,EACbR,MAAM,CAACS,MAAM,EACbR,OAAO,EACPD,MAAM,CAACU,MAAM,GAAGb,IAAI,CAACG,MAAM,CAACU,MAAM,CAAC,GAAGC,SAAS,EAC/CX,MAAM,CAACY,cAAc,GAAGf,IAAI,CAACG,MAAM,CAACY,cAAc,CAAC,GAAGD,SACxD,CAAC,CACAM,IAAI,CAACC,EAAE,IAAIH,QAAQ,CAAC,IAAI,EAAE5B,MAAM,CAAC0B,IAAI,CAACK,EAAE,CAAC,CAAC,CAAC,CAC3CC,KAAK,CAAEC,GAAU,IAAKL,QAAQ,CAACK,GAAG,EAAEjC,MAAM,CAACkC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D","ignoreList":[]}
+{"version":3,"names":["Buffer","NitroModules","binaryLikeToArrayBuffer","native","getNative","createHybridObject","ARGON2_VERSION","ARGON2_MAX_U24","ARGON2_MAX_U32","isUInt","value","max","Number","isFinite","isInteger","validateAlgorithm","algorithm","TypeError","validateArgon2Params","params","version","parallelism","RangeError","tagLength","minMemory","memory","passes","toString","nonceAB","nonce","byteLength","toAB","argon2Sync","result","hashSync","message","secret","undefined","associatedData","from","argon2","callback","err","alloc","hash","then","ab","catch"],"sourceRoot":"../../src","sources":["argon2.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,uBAAuB,QAAQ,SAAS;AAGjD,IAAIC,MAAoB;AACxB,SAASC,SAASA,CAAA,EAAiB;EACjC,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGF,YAAY,CAACI,kBAAkB,CAAe,QAAQ,CAAC;EAClE;EACA,OAAOF,MAAM;AACf;AAcA,MAAMG,cAAc,GAAG,IAAI,CAAC,CAAC;;AAE7B;AACA;AACA;AACA;AACA;AACA;AACA;AACA,MAAMC,cAAc,GAAG,SAAS;AAChC,MAAMC,cAAc,GAAG,WAAW;AAElC,SAASC,MAAMA,CAACC,KAAc,EAAEC,GAAW,EAAmB;EAC5D,OACE,OAAOD,KAAK,KAAK,QAAQ,IACzBE,MAAM,CAACC,QAAQ,CAACH,KAAK,CAAC,IACtBE,MAAM,CAACE,SAAS,CAACJ,KAAK,CAAC,IACvBA,KAAK,IAAI,CAAC,IACVA,KAAK,IAAIC,GAAG;AAEhB;AAEA,SAASI,iBAAiBA,CAACC,SAAiB,EAAQ;EAClD,IACEA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,SAAS,IACvBA,SAAS,KAAK,UAAU,EACxB;IACA,MAAM,IAAIC,SAAS,CAAC,6BAA6BD,SAAS,EAAE,CAAC;EAC/D;AACF;;AAEA;AACA;AACA,SAASE,oBAAoBA,CAC3BC,MAAoB,EACpBC,OAAe,EACF;EACb,IAAI,CAACX,MAAM,CAACU,MAAM,CAACE,WAAW,EAAEd,cAAc,CAAC,IAAIY,MAAM,CAACE,WAAW,GAAG,CAAC,EAAE;IACzE,MAAM,IAAIC,UAAU,CAClB,+BAA+BH,MAAM,CAACE,WAAW,GAAG,GAClD,8BACJ,CAAC;EACH;EACA,IAAI,CAACZ,MAAM,CAACU,MAAM,CAACI,SAAS,EAAEf,cAAc,CAAC,IAAIW,MAAM,CAACI,SAAS,GAAG,CAAC,EAAE;IACrE,MAAM,IAAID,UAAU,CAClB,6BAA6BH,MAAM,CAACI,SAAS,GAAG,GAC9C,8BACJ,CAAC;EACH;EACA,MAAMC,SAAS,GAAG,CAAC,GAAGL,MAAM,CAACE,WAAW;EACxC,IAAI,CAACZ,MAAM,CAACU,MAAM,CAACM,MAAM,EAAEjB,cAAc,CAAC,IAAIW,MAAM,CAACM,MAAM,GAAGD,SAAS,EAAE;IACvE,MAAM,IAAIF,UAAU,CAClB,0BAA0BH,MAAM,CAACM,MAAM,OAAO,GAC5C,uBAAuBD,SAAS,mBACpC,CAAC;EACH;EACA,IAAI,CAACf,MAAM,CAACU,MAAM,CAACO,MAAM,EAAElB,cAAc,CAAC,IAAIW,MAAM,CAACO,MAAM,GAAG,CAAC,EAAE;IAC/D,MAAM,IAAIJ,UAAU,CAClB,0BAA0BH,MAAM,CAACO,MAAM,GAAG,GACxC,8BACJ,CAAC;EACH;EACA,IAAIN,OAAO,KAAK,IAAI,IAAIA,OAAO,KAAK,IAAI,EAAE;IACxC,MAAM,IAAIE,UAAU,CAClB,6BAA6BF,OAAO,CAACO,QAAQ,CAAC,EAAE,CAAC,GAAG,GAClD,0BACJ,CAAC;EACH;EACA;EACA;EACA;EACA,MAAMC,OAAO,GAAG1B,uBAAuB,CAACiB,MAAM,CAACU,KAAK,CAAC;EACrD,IAAID,OAAO,CAACE,UAAU,GAAG,CAAC,IAAIF,OAAO,CAACE,UAAU,GAAGtB,cAAc,EAAE;IACjE,MAAM,IAAIc,UAAU,CAClB,gCAAgCM,OAAO,CAACE,UAAU,SAAS,GACzD,gCACJ,CAAC;EACH;EACA,OAAOF,OAAO;AAChB;AAEA,SAASG,IAAIA,CAACrB,KAAiB,EAAe;EAC5C,OAAOR,uBAAuB,CAACQ,KAAK,CAAC;AACvC;AAEA,OAAO,SAASsB,UAAUA,CAAChB,SAAiB,EAAEG,MAAoB,EAAU;EAC1EJ,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMI,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAId,cAAc;EAChD,MAAMsB,OAAO,GAAGV,oBAAoB,CAACC,MAAM,EAAEC,OAAO,CAAC;EACrD,MAAMa,MAAM,GAAG7B,SAAS,CAAC,CAAC,CAAC8B,QAAQ,CACjClB,SAAS,EACTe,IAAI,CAACZ,MAAM,CAACgB,OAAO,CAAC,EACpBP,OAAO,EACPT,MAAM,CAACE,WAAW,EAClBF,MAAM,CAACI,SAAS,EAChBJ,MAAM,CAACM,MAAM,EACbN,MAAM,CAACO,MAAM,EACbN,OAAO,EACPD,MAAM,CAACiB,MAAM,GAAGL,IAAI,CAACZ,MAAM,CAACiB,MAAM,CAAC,GAAGC,SAAS,EAC/ClB,MAAM,CAACmB,cAAc,GAAGP,IAAI,CAACZ,MAAM,CAACmB,cAAc,CAAC,GAAGD,SACxD,CAAC;EACD,OAAOrC,MAAM,CAACuC,IAAI,CAACN,MAAM,CAAC;AAC5B;AAEA,OAAO,SAASO,MAAMA,CACpBxB,SAAiB,EACjBG,MAAoB,EACpBsB,QAAqD,EAC/C;EACN1B,iBAAiB,CAACC,SAAS,CAAC;EAC5B,MAAMI,OAAO,GAAGD,MAAM,CAACC,OAAO,IAAId,cAAc;EAChD,IAAIsB,OAAoB;EACxB,IAAI;IACFA,OAAO,GAAGV,oBAAoB,CAACC,MAAM,EAAEC,OAAO,CAAC;EACjD,CAAC,CAAC,OAAOsB,GAAG,EAAE;IACZD,QAAQ,CAACC,GAAG,EAAW1C,MAAM,CAAC2C,KAAK,CAAC,CAAC,CAAC,CAAC;IACvC;EACF;EACAvC,SAAS,CAAC,CAAC,CACRwC,IAAI,CACH5B,SAAS,EACTe,IAAI,CAACZ,MAAM,CAACgB,OAAO,CAAC,EACpBP,OAAO,EACPT,MAAM,CAACE,WAAW,EAClBF,MAAM,CAACI,SAAS,EAChBJ,MAAM,CAACM,MAAM,EACbN,MAAM,CAACO,MAAM,EACbN,OAAO,EACPD,MAAM,CAACiB,MAAM,GAAGL,IAAI,CAACZ,MAAM,CAACiB,MAAM,CAAC,GAAGC,SAAS,EAC/ClB,MAAM,CAACmB,cAAc,GAAGP,IAAI,CAACZ,MAAM,CAACmB,cAAc,CAAC,GAAGD,SACxD,CAAC,CACAQ,IAAI,CAACC,EAAE,IAAIL,QAAQ,CAAC,IAAI,EAAEzC,MAAM,CAACuC,IAAI,CAACO,EAAE,CAAC,CAAC,CAAC,CAC3CC,KAAK,CAAEL,GAAU,IAAKD,QAAQ,CAACC,GAAG,EAAE1C,MAAM,CAAC2C,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC;AAC1D","ignoreList":[]}

package/lib/module/cipher.js

@@ -25,6 +25,80 @@ export function getCipherInfo(name, options) {
   if (typeof name !== 'string' || name.length === 0) return undefined;
   return CipherUtils.getCipherInfo(name, options?.keyLength, options?.ivLength);
 }
+
+// libsodium ciphers aren't visible to OpenSSL's EVP_CIPHER_fetch, so
+// getCipherInfo() returns undefined for them. Hard-code the (key, iv)
+// byte-lengths the C++ factory will accept.
+const LIBSODIUM_CIPHER_PARAMS = {
+  xsalsa20: {
+    keyLength: 32,
+    ivLength: 24
+  },
+  'xsalsa20-poly1305': {
+    keyLength: 32,
+    ivLength: 24
+  },
+  'xchacha20-poly1305': {
+    keyLength: 32,
+    ivLength: 24
+  }
+};
+function validateCipherParams(cipherType, keyByteLength, ivByteLength) {
+  if (typeof cipherType !== 'string' || cipherType.length === 0) {
+    throw new TypeError('cipher algorithm must be a non-empty string');
+  }
+  // ArrayBuffer.byteLength is always a non-negative integer, so the only
+  // out-of-range value we need to guard is 0 — empty key buffers must not
+  // reach OpenSSL's EVP_CipherInit_ex.
+  if (keyByteLength === 0) {
+    throw new RangeError(`Invalid key length 0 for cipher ${cipherType}`);
+  }
+  const lower = cipherType.toLowerCase();
+  const sodium = LIBSODIUM_CIPHER_PARAMS[lower];
+  if (sodium) {
+    // libsodium parlance: "nonce" rather than "iv". Phrase the expected
+    // size as a natural-language clause so callers asserting on either
+    // `key must be N bytes` or `Invalid key length N` both match.
+    if (keyByteLength !== sodium.keyLength) {
+      throw new RangeError(`Invalid key length ${keyByteLength} for cipher ${cipherType} ` + `(key must be ${sodium.keyLength} bytes)`);
+    }
+    if (ivByteLength !== sodium.ivLength) {
+      throw new RangeError(`Invalid nonce length ${ivByteLength} for cipher ${cipherType} ` + `(nonce must be ${sodium.ivLength} bytes)`);
+    }
+    return;
+  }
+
+  // OpenSSL path. Look up the cipher's defaults once. Most callers pass
+  // exactly the cipher's default key/iv lengths (e.g. AES-128-CBC always
+  // wants 16/16) — short-circuit those to a single native round-trip.
+  // Variable-length ciphers (GCM, CCM, OCB, ChaCha20-Poly1305) fall through
+  // to per-parameter validation calls so the error message can name which
+  // of {key, iv} is wrong.
+  const info = CipherUtils.getCipherInfo(cipherType);
+  if (info === undefined) {
+    throw new TypeError(`Unsupported or unknown cipher type: ${cipherType}`);
+  }
+  const expectedIv = info.ivLength ?? 0;
+  if (expectedIv === 0 && ivByteLength > 0) {
+    throw new RangeError(`Cipher ${cipherType} does not use an iv (got ${ivByteLength} bytes)`);
+  }
+  if (expectedIv > 0 && ivByteLength === 0) {
+    throw new RangeError(`Cipher ${cipherType} requires an iv but none was provided`);
+  }
+
+  // Fast path: lengths match the cipher's defaults exactly.
+  if (info.keyLength === keyByteLength && expectedIv === ivByteLength) {
+    return;
+  }
+
+  // Variable-length: verify against native one parameter at a time.
+  if (CipherUtils.getCipherInfo(cipherType, keyByteLength, undefined) === undefined) {
+    throw new RangeError(`Invalid key length ${keyByteLength} for cipher ${cipherType}`);
+  }
+  if (expectedIv > 0 && CipherUtils.getCipherInfo(cipherType, undefined, ivByteLength) === undefined) {
+    throw new RangeError(`Invalid iv length ${ivByteLength} for cipher ${cipherType}`);
+  }
+}
 class CipherCommon extends Stream.Transform {
   _decoder = null;
   _decoderEncoding = undefined;
@@ -51,14 +125,17 @@ class CipherCommon extends Stream.Transform {
     }
     super(streamOptions); // Pass filtered options
 
-    const authTagLen = getUIntOption(options ?? {}, 'authTagLength') !== -1 ? getUIntOption(options ?? {}, 'authTagLength') : 16; // defaults to 16 bytes
-
+    // defaults to 16 bytes for AEAD modes; non-AEAD callers ignore it.
+    const authTagLen = getUIntOption(options, 'authTagLength') ?? 16;
+    const cipherKeyAB = binaryLikeToArrayBuffer(cipherKey);
+    const ivAB = binaryLikeToArrayBuffer(iv);
+    validateCipherParams(cipherType, cipherKeyAB.byteLength, ivAB.byteLength);
     const factory = NitroModules.createHybridObject('CipherFactory');
     this.native = factory.createCipher({
       isCipher,
       cipherType,
-      cipherKey: binaryLikeToArrayBuffer(cipherKey),
-      iv: binaryLikeToArrayBuffer(iv),
+      cipherKey: cipherKeyAB,
+      iv: ivAB,
       authTagLen
     });
   }
@@ -94,13 +171,27 @@ class CipherCommon extends Stream.Transform {
     }
     return Buffer.from(ret);
   }
+
+  // Stream interface — surface synchronous errors (bad encoding,
+  // OpenSSL EVP failures, AEAD tag mismatch in `final()`, etc.) via
+  // the callback so they emit as stream 'error' events instead of
+  // throwing out of the Transform plumbing and crashing the host
+  // pipeline.
   _transform(chunk, encoding, callback) {
-    this.push(this.update(chunk, normalizeEncoding(encoding)));
-    callback();
+    try {
+      this.push(this.update(chunk, normalizeEncoding(encoding)));
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
   _flush(callback) {
-    this.push(this.final());
-    callback();
+    try {
+      this.push(this.final());
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
   setAutoPadding(autoPadding) {
     const res = this.native.setAutoPadding(!!autoPadding);
@@ -114,7 +205,11 @@ class CipherCommon extends Stream.Transform {
     if (!this.native || typeof this.native.setAAD !== 'function') {
       throw new Error('Cipher native object or setAAD method not initialized.');
     }
-    const res = this.native.setAAD(buffer.buffer, options?.plaintextLength);
+    // Use binaryLikeToArrayBuffer (not `buffer.buffer`) so that sliced /
+    // offset views send only the AAD bytes the caller intended. Passing the
+    // raw backing ArrayBuffer authenticates the wrong data and silently
+    // breaks the AEAD integrity guarantee.
+    const res = this.native.setAAD(binaryLikeToArrayBuffer(buffer), options?.plaintextLength);
     if (!res) {
       throw new Error('setAAD failed (native call returned false)');
     }
@@ -180,12 +275,15 @@ output,
 // @ts-expect-error haven't implemented this part of @noble/ciphers API
 // eslint-disable-next-line @typescript-eslint/no-unused-vars
 counter) {
+  const cipherKeyAB = binaryLikeToArrayBuffer(key);
+  const ivAB = binaryLikeToArrayBuffer(nonce);
+  validateCipherParams('xsalsa20', cipherKeyAB.byteLength, ivAB.byteLength);
   const factory = NitroModules.createHybridObject('CipherFactory');
   const native = factory.createCipher({
     isCipher: true,
     cipherType: 'xsalsa20',
-    cipherKey: binaryLikeToArrayBuffer(key),
-    iv: binaryLikeToArrayBuffer(nonce)
+    cipherKey: cipherKeyAB,
+    iv: ivAB
   });
   const result = native.update(binaryLikeToArrayBuffer(data));
   return new Uint8Array(result);

package/lib/module/cipher.js.map

@@ -1 +1 @@
-{"version":3,"names":["NitroModules","Stream","StringDecoder","Buffer","binaryLikeToArrayBuffer","getDefaultEncoding","getUIntOption","normalizeEncoding","validateEncoding","CipherUtils","native","createHybridObject","getSupportedCiphers","getCipherInfo","name","keyLength","ivLength","getCiphers","options","length","undefined","CipherCommon","Transform","_decoder","_decoderEncoding","constructor","isCipher","cipherType","cipherKey","iv","streamOptions","transformKeys","key","authTagLen","factory","createCipher","getDecoder","encoding","normalized","Error","update","data","inputEncoding","outputEncoding","defaultEncoding","ArrayBuffer","isView","ret","write","from","final","end","_transform","chunk","callback","push","_flush","setAutoPadding","autoPadding","res","setAAD","buffer","plaintextLength","getAuthTag","setAuthTag","tag","Cipheriv","Decipheriv","createDecipheriv","algorithm","createCipheriv","xsalsa20","nonce","output","counter","result","Uint8Array"],"sourceRoot":"../../src","sources":["cipher.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AACzD,OAAOC,MAAM,MAAiC,iBAAiB;AAC/D,SAASC,aAAa,QAAQ,gBAAgB;AAC9C,SAASC,MAAM,QAAQ,gCAAgC;;AAStC;;AAKjB,SAASC,uBAAuB,QAAQ,SAAS;AACjD,SACEC,kBAAkB,EAClBC,aAAa,EACbC,iBAAiB,EACjBC,gBAAgB,QACX,gBAAgB;AAiBvB,MAAMC,WAAW,CAAC;EAChB,OAAeC,MAAM,GACnBV,YAAY,CAACW,kBAAkB,CAAe,QAAQ,CAAC;EACzD,OAAcC,mBAAmBA,CAAA,EAAa;IAC5C,OAAO,IAAI,CAACF,MAAM,CAACE,mBAAmB,CAAC,CAAC;EAC1C;EACA,OAAcC,aAAaA,CACzBC,IAAY,EACZC,SAAkB,EAClBC,QAAiB,EACa;IAC9B,OAAO,IAAI,CAACN,MAAM,CAACG,aAAa,CAACC,IAAI,EAAEC,SAAS,EAAEC,QAAQ,CAAC;EAC7D;AACF;AAEA,OAAO,SAASC,UAAUA,CAAA,EAAa;EACrC,OAAOR,WAAW,CAACG,mBAAmB,CAAC,CAAC;AAC1C;AAEA,OAAO,SAASC,aAAaA,CAC3BC,IAAY,EACZI,OAAmD,EACrB;EAC9B,IAAI,OAAOJ,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACK,MAAM,KAAK,CAAC,EAAE,OAAOC,SAAS;EACnE,OAAOX,WAAW,CAACI,aAAa,CAACC,IAAI,EAAEI,OAAO,EAAEH,SAAS,EAAEG,OAAO,EAAEF,QAAQ,CAAC;AAC/E;AAUA,MAAMK,YAAY,SAASpB,MAAM,CAACqB,SAAS,CAAC;EAElCC,QAAQ,GAAyB,IAAI;EACrCC,gBAAgB,GAAuBJ,SAAS;EAExDK,WAAWA,CAAC;IAAEC,QAAQ;IAAEC,UAAU;IAAEC,SAAS;IAAEC,EAAE;IAAEX;EAAoB,CAAC,EAAE;IACxE;IACA,MAAMY,aAA+B,GAAG,CAAC,CAAC;IAC1C,IAAIZ,OAAO,EAAE;MACX;MACA,MAAMa,aAA4C,GAAG,CACnD,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX;MACA;MAAA,CACD;MACD,KAAK,MAAMC,GAAG,IAAID,aAAa,EAAE;QAC/B,IAAIC,GAAG,IAAId,OAAO,EAAE;UAClB;UACCY,aAAa,CAASE,GAAG,CAAC,GAAId,OAAO,CAASc,GAAG,CAAC;QACrD;MACF;IACF;IACA,KAAK,CAACF,aAAa,CAAC,CAAC,CAAC;;IAEtB,MAAMG,UAAkB,GACtB3B,aAAa,CAACY,OAAO,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,KAAK,CAAC,CAAC,GAChDZ,aAAa,CAACY,OAAO,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,GAC7C,EAAE,CAAC,CAAC;;IAEV,MAAMgB,OAAO,GACXlC,YAAY,CAACW,kBAAkB,CAAgB,eAAe,CAAC;IACjE,IAAI,CAACD,MAAM,GAAGwB,OAAO,CAACC,YAAY,CAAC;MACjCT,QAAQ;MACRC,UAAU;MACVC,SAAS,EAAExB,uBAAuB,CAACwB,SAAS,CAAC;MAC7CC,EAAE,EAAEzB,uBAAuB,CAACyB,EAAE,CAAC;MAC/BI;IACF,CAAC,CAAC;EACJ;EAEQG,UAAUA,CAACC,QAAgB,EAAiB;IAClD,MAAMC,UAAU,GAAG/B,iBAAiB,CAAC8B,QAAQ,CAAC;IAC9C,IAAI,CAAC,IAAI,CAACd,QAAQ,EAAE;MAClB,IAAI,CAACA,QAAQ,GAAG,IAAIrB,aAAa,CAACmC,QAA0B,CAAC;MAC7D,IAAI,CAACb,gBAAgB,GAAGc,UAAU;IACpC,CAAC,MAAM,IAAI,IAAI,CAACd,gBAAgB,KAAKc,UAAU,EAAE;MAC/C,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IACA,OAAO,IAAI,CAAChB,QAAQ;EACtB;EASAiB,MAAMA,CACJC,IAAgB,EAChBC,aAAwB,EACxBC,cAAyB,EACR;IACjB,MAAMC,eAAe,GAAGvC,kBAAkB,CAAC,CAAC;IAC5CqC,aAAa,GAAGA,aAAa,IAAIE,eAAe;IAChDD,cAAc,GAAGA,cAAc,IAAIC,eAAe;IAElD,IAAI,OAAOH,IAAI,KAAK,QAAQ,EAAE;MAC5BjC,gBAAgB,CAACiC,IAAI,EAAEC,aAAa,CAAC;IACvC,CAAC,MAAM,IAAI,CAACG,WAAW,CAACC,MAAM,CAACL,IAAI,CAAC,EAAE;MACpC,MAAM,IAAIF,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IAEA,MAAMQ,GAAG,GAAG,IAAI,CAACrC,MAAM,CAAC8B,MAAM,CAC5BpC,uBAAuB,CAACqC,IAAI,EAAEC,aAAa,CAC7C,CAAC;IAED,IAAIC,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACP,UAAU,CAACO,cAAc,CAAC,CAACK,KAAK,CAAC7C,MAAM,CAAC8C,IAAI,CAACF,GAAG,CAAC,CAAC;IAChE;IAEA,OAAO5C,MAAM,CAAC8C,IAAI,CAACF,GAAG,CAAC;EACzB;EAIAG,KAAKA,CAACP,cAA0C,EAAmB;IACjE,MAAMI,GAAG,GAAG,IAAI,CAACrC,MAAM,CAACwC,KAAK,CAAC,CAAC;IAE/B,IAAIP,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACP,UAAU,CAACO,cAAc,CAAC,CAACQ,GAAG,CAAChD,MAAM,CAAC8C,IAAI,CAACF,GAAG,CAAC,CAAC;IAC9D;IAEA,OAAO5C,MAAM,CAAC8C,IAAI,CAACF,GAAG,CAAC;EACzB;EAEAK,UAAUA,CACRC,KAAiB,EACjBhB,QAAwB,EACxBiB,QAAoB,EACpB;IACA,IAAI,CAACC,IAAI,CAAC,IAAI,CAACf,MAAM,CAACa,KAAK,EAAE9C,iBAAiB,CAAC8B,QAAQ,CAAC,CAAC,CAAC;IAC1DiB,QAAQ,CAAC,CAAC;EACZ;EAEAE,MAAMA,CAACF,QAAoB,EAAE;IAC3B,IAAI,CAACC,IAAI,CAAC,IAAI,CAACL,KAAK,CAAC,CAAC,CAAC;IACvBI,QAAQ,CAAC,CAAC;EACZ;EAEOG,cAAcA,CAACC,WAAqB,EAAQ;IACjD,MAAMC,GAAG,GAAG,IAAI,CAACjD,MAAM,CAAC+C,cAAc,CAAC,CAAC,CAACC,WAAW,CAAC;IACrD,IAAI,CAACC,GAAG,EAAE;MACR,MAAM,IAAIpB,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,OAAO,IAAI;EACb;EAEOqB,MAAMA,CACXC,MAAc,EACd3C,OAEC,EACK;IACN;IACA,IAAI,CAAC,IAAI,CAACR,MAAM,IAAI,OAAO,IAAI,CAACA,MAAM,CAACkD,MAAM,KAAK,UAAU,EAAE;MAC5D,MAAM,IAAIrB,KAAK,CAAC,wDAAwD,CAAC;IAC3E;IACA,MAAMoB,GAAG,GAAG,IAAI,CAACjD,MAAM,CAACkD,MAAM,CAACC,MAAM,CAACA,MAAM,EAAE3C,OAAO,EAAE4C,eAAe,CAAC;IACvE,IAAI,CAACH,GAAG,EAAE;MACR,MAAM,IAAIpB,KAAK,CAAC,4CAA4C,CAAC;IAC/D;IACA,OAAO,IAAI;EACb;EAEOwB,UAAUA,CAAA,EAAW;IAC1B,OAAO5D,MAAM,CAAC8C,IAAI,CAAC,IAAI,CAACvC,MAAM,CAACqD,UAAU,CAAC,CAAC,CAAC;EAC9C;EAEOC,UAAUA,CAACC,GAAW,EAAQ;IACnC,MAAMN,GAAG,GAAG,IAAI,CAACjD,MAAM,CAACsD,UAAU,CAAC5D,uBAAuB,CAAC6D,GAAG,CAAC,CAAC;IAChE,IAAI,CAACN,GAAG,EAAE;MACR,MAAM,IAAIpB,KAAK,CAAC,mBAAmB,CAAC;IACtC;IACA,OAAO,IAAI;EACb;EAEO3B,mBAAmBA,CAAA,EAAa;IACrC,OAAO,IAAI,CAACF,MAAM,CAACE,mBAAmB,CAAC,CAAC;EAC1C;AACF;AAEA,MAAMsD,QAAQ,SAAS7C,YAAY,CAAC;EAClCI,WAAWA,CACTE,UAAkB,EAClBC,SAAyB,EACzBC,EAAc,EACdX,OAAuB,EACvB;IACA,KAAK,CAAC;MACJQ,QAAQ,EAAE,IAAI;MACdC,UAAU;MACVC,SAAS,EAAExB,uBAAuB,CAACwB,SAAS,CAAC;MAC7CC,EAAE,EAAEzB,uBAAuB,CAACyB,EAAE,CAAC;MAC/BX;IACF,CAAC,CAAC;EACJ;AACF;AAIA,MAAMiD,UAAU,SAAS9C,YAAY,CAAC;EACpCI,WAAWA,CACTE,UAAkB,EAClBC,SAAyB,EACzBC,EAAc,EACdX,OAAuB,EACvB;IACA,KAAK,CAAC;MACJQ,QAAQ,EAAE,KAAK;MACfC,UAAU;MACVC,SAAS,EAAExB,uBAAuB,CAACwB,SAAS,CAAC;MAC7CC,EAAE,EAAEzB,uBAAuB,CAACyB,EAAE,CAAC;MAC/BX;IACF,CAAC,CAAC;EACJ;AACF;AA4BA,OAAO,SAASkD,gBAAgBA,CAC9BC,SAAiB,EACjBrC,GAAmB,EACnBH,EAAc,EACdX,OAAuB,EACb;EACV,OAAO,IAAIiD,UAAU,CAACE,SAAS,EAAErC,GAAG,EAAEH,EAAE,EAAEX,OAAO,CAAC;AACpD;AA0BA,OAAO,SAASoD,cAAcA,CAC5BD,SAAiB,EACjBrC,GAAmB,EACnBH,EAAc,EACdX,OAAuB,EACf;EACR,OAAO,IAAIgD,QAAQ,CAACG,SAAS,EAAErC,GAAG,EAAEH,EAAE,EAAEX,OAAO,CAAC;AAClD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASqD,QAAQA,CACtBvC,GAAe,EACfwC,KAAiB,EACjB/B,IAAgB;AAChB;AACA;AACAgC,MAA+B;AAC/B;AACA;AACAC,OAAgB,EACJ;EACZ,MAAMxC,OAAO,GACXlC,YAAY,CAACW,kBAAkB,CAAgB,eAAe,CAAC;EACjE,MAAMD,MAAM,GAAGwB,OAAO,CAACC,YAAY,CAAC;IAClCT,QAAQ,EAAE,IAAI;IACdC,UAAU,EAAE,UAAU;IACtBC,SAAS,EAAExB,uBAAuB,CAAC4B,GAAG,CAAC;IACvCH,EAAE,EAAEzB,uBAAuB,CAACoE,KAAK;EACnC,CAAC,CAAC;EACF,MAAMG,MAAM,GAAGjE,MAAM,CAAC8B,MAAM,CAACpC,uBAAuB,CAACqC,IAAI,CAAC,CAAC;EAC3D,OAAO,IAAImC,UAAU,CAACD,MAAM,CAAC;AAC/B","ignoreList":[]}
+{"version":3,"names":["NitroModules","Stream","StringDecoder","Buffer","binaryLikeToArrayBuffer","getDefaultEncoding","getUIntOption","normalizeEncoding","validateEncoding","CipherUtils","native","createHybridObject","getSupportedCiphers","getCipherInfo","name","keyLength","ivLength","getCiphers","options","length","undefined","LIBSODIUM_CIPHER_PARAMS","xsalsa20","validateCipherParams","cipherType","keyByteLength","ivByteLength","TypeError","RangeError","lower","toLowerCase","sodium","info","expectedIv","CipherCommon","Transform","_decoder","_decoderEncoding","constructor","isCipher","cipherKey","iv","streamOptions","transformKeys","key","authTagLen","cipherKeyAB","ivAB","byteLength","factory","createCipher","getDecoder","encoding","normalized","Error","update","data","inputEncoding","outputEncoding","defaultEncoding","ArrayBuffer","isView","ret","write","from","final","end","_transform","chunk","callback","push","err","_flush","setAutoPadding","autoPadding","res","setAAD","buffer","plaintextLength","getAuthTag","setAuthTag","tag","Cipheriv","Decipheriv","createDecipheriv","algorithm","createCipheriv","nonce","output","counter","result","Uint8Array"],"sourceRoot":"../../src","sources":["cipher.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AACzD,OAAOC,MAAM,MAAiC,iBAAiB;AAC/D,SAASC,aAAa,QAAQ,gBAAgB;AAC9C,SAASC,MAAM,QAAQ,gCAAgC;;AAStC;;AAKjB,SAASC,uBAAuB,QAAQ,SAAS;AACjD,SACEC,kBAAkB,EAClBC,aAAa,EACbC,iBAAiB,EACjBC,gBAAgB,QACX,gBAAgB;AAiBvB,MAAMC,WAAW,CAAC;EAChB,OAAeC,MAAM,GACnBV,YAAY,CAACW,kBAAkB,CAAe,QAAQ,CAAC;EACzD,OAAcC,mBAAmBA,CAAA,EAAa;IAC5C,OAAO,IAAI,CAACF,MAAM,CAACE,mBAAmB,CAAC,CAAC;EAC1C;EACA,OAAcC,aAAaA,CACzBC,IAAY,EACZC,SAAkB,EAClBC,QAAiB,EACa;IAC9B,OAAO,IAAI,CAACN,MAAM,CAACG,aAAa,CAACC,IAAI,EAAEC,SAAS,EAAEC,QAAQ,CAAC;EAC7D;AACF;AAEA,OAAO,SAASC,UAAUA,CAAA,EAAa;EACrC,OAAOR,WAAW,CAACG,mBAAmB,CAAC,CAAC;AAC1C;AAEA,OAAO,SAASC,aAAaA,CAC3BC,IAAY,EACZI,OAAmD,EACrB;EAC9B,IAAI,OAAOJ,IAAI,KAAK,QAAQ,IAAIA,IAAI,CAACK,MAAM,KAAK,CAAC,EAAE,OAAOC,SAAS;EACnE,OAAOX,WAAW,CAACI,aAAa,CAACC,IAAI,EAAEI,OAAO,EAAEH,SAAS,EAAEG,OAAO,EAAEF,QAAQ,CAAC;AAC/E;;AAEA;AACA;AACA;AACA,MAAMK,uBAEL,GAAG;EACFC,QAAQ,EAAE;IAAEP,SAAS,EAAE,EAAE;IAAEC,QAAQ,EAAE;EAAG,CAAC;EACzC,mBAAmB,EAAE;IAAED,SAAS,EAAE,EAAE;IAAEC,QAAQ,EAAE;EAAG,CAAC;EACpD,oBAAoB,EAAE;IAAED,SAAS,EAAE,EAAE;IAAEC,QAAQ,EAAE;EAAG;AACtD,CAAC;AAED,SAASO,oBAAoBA,CAC3BC,UAAkB,EAClBC,aAAqB,EACrBC,YAAoB,EACd;EACN,IAAI,OAAOF,UAAU,KAAK,QAAQ,IAAIA,UAAU,CAACL,MAAM,KAAK,CAAC,EAAE;IAC7D,MAAM,IAAIQ,SAAS,CAAC,6CAA6C,CAAC;EACpE;EACA;EACA;EACA;EACA,IAAIF,aAAa,KAAK,CAAC,EAAE;IACvB,MAAM,IAAIG,UAAU,CAAC,mCAAmCJ,UAAU,EAAE,CAAC;EACvE;EAEA,MAAMK,KAAK,GAAGL,UAAU,CAACM,WAAW,CAAC,CAAC;EACtC,MAAMC,MAAM,GAAGV,uBAAuB,CAACQ,KAAK,CAAC;EAC7C,IAAIE,MAAM,EAAE;IACV;IACA;IACA;IACA,IAAIN,aAAa,KAAKM,MAAM,CAAChB,SAAS,EAAE;MACtC,MAAM,IAAIa,UAAU,CAClB,sBAAsBH,aAAa,eAAeD,UAAU,GAAG,GAC7D,gBAAgBO,MAAM,CAAChB,SAAS,SACpC,CAAC;IACH;IACA,IAAIW,YAAY,KAAKK,MAAM,CAACf,QAAQ,EAAE;MACpC,MAAM,IAAIY,UAAU,CAClB,wBAAwBF,YAAY,eAAeF,UAAU,GAAG,GAC9D,kBAAkBO,MAAM,CAACf,QAAQ,SACrC,CAAC;IACH;IACA;EACF;;EAEA;EACA;EACA;EACA;EACA;EACA;EACA,MAAMgB,IAAI,GAAGvB,WAAW,CAACI,aAAa,CAACW,UAAU,CAAC;EAClD,IAAIQ,IAAI,KAAKZ,SAAS,EAAE;IACtB,MAAM,IAAIO,SAAS,CAAC,uCAAuCH,UAAU,EAAE,CAAC;EAC1E;EAEA,MAAMS,UAAU,GAAGD,IAAI,CAAChB,QAAQ,IAAI,CAAC;EACrC,IAAIiB,UAAU,KAAK,CAAC,IAAIP,YAAY,GAAG,CAAC,EAAE;IACxC,MAAM,IAAIE,UAAU,CAClB,UAAUJ,UAAU,4BAA4BE,YAAY,SAC9D,CAAC;EACH;EACA,IAAIO,UAAU,GAAG,CAAC,IAAIP,YAAY,KAAK,CAAC,EAAE;IACxC,MAAM,IAAIE,UAAU,CAClB,UAAUJ,UAAU,uCACtB,CAAC;EACH;;EAEA;EACA,IAAIQ,IAAI,CAACjB,SAAS,KAAKU,aAAa,IAAIQ,UAAU,KAAKP,YAAY,EAAE;IACnE;EACF;;EAEA;EACA,IACEjB,WAAW,CAACI,aAAa,CAACW,UAAU,EAAEC,aAAa,EAAEL,SAAS,CAAC,KAC/DA,SAAS,EACT;IACA,MAAM,IAAIQ,UAAU,CAClB,sBAAsBH,aAAa,eAAeD,UAAU,EAC9D,CAAC;EACH;EACA,IACES,UAAU,GAAG,CAAC,IACdxB,WAAW,CAACI,aAAa,CAACW,UAAU,EAAEJ,SAAS,EAAEM,YAAY,CAAC,KAAKN,SAAS,EAC5E;IACA,MAAM,IAAIQ,UAAU,CAClB,qBAAqBF,YAAY,eAAeF,UAAU,EAC5D,CAAC;EACH;AACF;AAUA,MAAMU,YAAY,SAASjC,MAAM,CAACkC,SAAS,CAAC;EAElCC,QAAQ,GAAyB,IAAI;EACrCC,gBAAgB,GAAuBjB,SAAS;EAExDkB,WAAWA,CAAC;IAAEC,QAAQ;IAAEf,UAAU;IAAEgB,SAAS;IAAEC,EAAE;IAAEvB;EAAoB,CAAC,EAAE;IACxE;IACA,MAAMwB,aAA+B,GAAG,CAAC,CAAC;IAC1C,IAAIxB,OAAO,EAAE;MACX;MACA,MAAMyB,aAA4C,GAAG,CACnD,uBAAuB,EACvB,uBAAuB,EACvB,eAAe,EACf,iBAAiB,EACjB,YAAY,EACZ,SAAS,EACT,MAAM,EACN,OAAO,EACP,QAAQ,EACR,OAAO,EACP,WAAW,EACX;MACA;MAAA,CACD;MACD,KAAK,MAAMC,GAAG,IAAID,aAAa,EAAE;QAC/B,IAAIC,GAAG,IAAI1B,OAAO,EAAE;UAClB;UACCwB,aAAa,CAASE,GAAG,CAAC,GAAI1B,OAAO,CAAS0B,GAAG,CAAC;QACrD;MACF;IACF;IACA,KAAK,CAACF,aAAa,CAAC,CAAC,CAAC;;IAEtB;IACA,MAAMG,UAAU,GACdvC,aAAa,CACXY,OAAO,EACP,eACF,CAAC,IAAI,EAAE;IAET,MAAM4B,WAAW,GAAG1C,uBAAuB,CAACoC,SAAS,CAAC;IACtD,MAAMO,IAAI,GAAG3C,uBAAuB,CAACqC,EAAE,CAAC;IACxClB,oBAAoB,CAACC,UAAU,EAAEsB,WAAW,CAACE,UAAU,EAAED,IAAI,CAACC,UAAU,CAAC;IAEzE,MAAMC,OAAO,GACXjD,YAAY,CAACW,kBAAkB,CAAgB,eAAe,CAAC;IACjE,IAAI,CAACD,MAAM,GAAGuC,OAAO,CAACC,YAAY,CAAC;MACjCX,QAAQ;MACRf,UAAU;MACVgB,SAAS,EAAEM,WAAW;MACtBL,EAAE,EAAEM,IAAI;MACRF;IACF,CAAC,CAAC;EACJ;EAEQM,UAAUA,CAACC,QAAgB,EAAiB;IAClD,MAAMC,UAAU,GAAG9C,iBAAiB,CAAC6C,QAAQ,CAAC;IAC9C,IAAI,CAAC,IAAI,CAAChB,QAAQ,EAAE;MAClB,IAAI,CAACA,QAAQ,GAAG,IAAIlC,aAAa,CAACkD,QAA0B,CAAC;MAC7D,IAAI,CAACf,gBAAgB,GAAGgB,UAAU;IACpC,CAAC,MAAM,IAAI,IAAI,CAAChB,gBAAgB,KAAKgB,UAAU,EAAE;MAC/C,MAAM,IAAIC,KAAK,CAAC,wBAAwB,CAAC;IAC3C;IACA,OAAO,IAAI,CAAClB,QAAQ;EACtB;EASAmB,MAAMA,CACJC,IAAgB,EAChBC,aAAwB,EACxBC,cAAyB,EACR;IACjB,MAAMC,eAAe,GAAGtD,kBAAkB,CAAC,CAAC;IAC5CoD,aAAa,GAAGA,aAAa,IAAIE,eAAe;IAChDD,cAAc,GAAGA,cAAc,IAAIC,eAAe;IAElD,IAAI,OAAOH,IAAI,KAAK,QAAQ,EAAE;MAC5BhD,gBAAgB,CAACgD,IAAI,EAAEC,aAAa,CAAC;IACvC,CAAC,MAAM,IAAI,CAACG,WAAW,CAACC,MAAM,CAACL,IAAI,CAAC,EAAE;MACpC,MAAM,IAAIF,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IAEA,MAAMQ,GAAG,GAAG,IAAI,CAACpD,MAAM,CAAC6C,MAAM,CAC5BnD,uBAAuB,CAACoD,IAAI,EAAEC,aAAa,CAC7C,CAAC;IAED,IAAIC,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACP,UAAU,CAACO,cAAc,CAAC,CAACK,KAAK,CAAC5D,MAAM,CAAC6D,IAAI,CAACF,GAAG,CAAC,CAAC;IAChE;IAEA,OAAO3D,MAAM,CAAC6D,IAAI,CAACF,GAAG,CAAC;EACzB;EAIAG,KAAKA,CAACP,cAA0C,EAAmB;IACjE,MAAMI,GAAG,GAAG,IAAI,CAACpD,MAAM,CAACuD,KAAK,CAAC,CAAC;IAE/B,IAAIP,cAAc,IAAIA,cAAc,KAAK,QAAQ,EAAE;MACjD,OAAO,IAAI,CAACP,UAAU,CAACO,cAAc,CAAC,CAACQ,GAAG,CAAC/D,MAAM,CAAC6D,IAAI,CAACF,GAAG,CAAC,CAAC;IAC9D;IAEA,OAAO3D,MAAM,CAAC6D,IAAI,CAACF,GAAG,CAAC;EACzB;;EAEA;EACA;EACA;EACA;EACA;EACAK,UAAUA,CACRC,KAAiB,EACjBhB,QAAwB,EACxBiB,QAAsC,EACtC;IACA,IAAI;MACF,IAAI,CAACC,IAAI,CAAC,IAAI,CAACf,MAAM,CAACa,KAAK,EAAE7D,iBAAiB,CAAC6C,QAAQ,CAAC,CAAC,CAAC;MAC1DiB,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZF,QAAQ,CAACE,GAAY,CAAC;IACxB;EACF;EAEAC,MAAMA,CAACH,QAAsC,EAAE;IAC7C,IAAI;MACF,IAAI,CAACC,IAAI,CAAC,IAAI,CAACL,KAAK,CAAC,CAAC,CAAC;MACvBI,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOE,GAAG,EAAE;MACZF,QAAQ,CAACE,GAAY,CAAC;IACxB;EACF;EAEOE,cAAcA,CAACC,WAAqB,EAAQ;IACjD,MAAMC,GAAG,GAAG,IAAI,CAACjE,MAAM,CAAC+D,cAAc,CAAC,CAAC,CAACC,WAAW,CAAC;IACrD,IAAI,CAACC,GAAG,EAAE;MACR,MAAM,IAAIrB,KAAK,CAAC,uBAAuB,CAAC;IAC1C;IACA,OAAO,IAAI;EACb;EAEOsB,MAAMA,CACXC,MAAc,EACd3D,OAEC,EACK;IACN;IACA,IAAI,CAAC,IAAI,CAACR,MAAM,IAAI,OAAO,IAAI,CAACA,MAAM,CAACkE,MAAM,KAAK,UAAU,EAAE;MAC5D,MAAM,IAAItB,KAAK,CAAC,wDAAwD,CAAC;IAC3E;IACA;IACA;IACA;IACA;IACA,MAAMqB,GAAG,GAAG,IAAI,CAACjE,MAAM,CAACkE,MAAM,CAC5BxE,uBAAuB,CAACyE,MAAM,CAAC,EAC/B3D,OAAO,EAAE4D,eACX,CAAC;IACD,IAAI,CAACH,GAAG,EAAE;MACR,MAAM,IAAIrB,KAAK,CAAC,4CAA4C,CAAC;IAC/D;IACA,OAAO,IAAI;EACb;EAEOyB,UAAUA,CAAA,EAAW;IAC1B,OAAO5E,MAAM,CAAC6D,IAAI,CAAC,IAAI,CAACtD,MAAM,CAACqE,UAAU,CAAC,CAAC,CAAC;EAC9C;EAEOC,UAAUA,CAACC,GAAW,EAAQ;IACnC,MAAMN,GAAG,GAAG,IAAI,CAACjE,MAAM,CAACsE,UAAU,CAAC5E,uBAAuB,CAAC6E,GAAG,CAAC,CAAC;IAChE,IAAI,CAACN,GAAG,EAAE;MACR,MAAM,IAAIrB,KAAK,CAAC,mBAAmB,CAAC;IACtC;IACA,OAAO,IAAI;EACb;EAEO1C,mBAAmBA,CAAA,EAAa;IACrC,OAAO,IAAI,CAACF,MAAM,CAACE,mBAAmB,CAAC,CAAC;EAC1C;AACF;AAEA,MAAMsE,QAAQ,SAAShD,YAAY,CAAC;EAClCI,WAAWA,CACTd,UAAkB,EAClBgB,SAAyB,EACzBC,EAAc,EACdvB,OAAuB,EACvB;IACA,KAAK,CAAC;MACJqB,QAAQ,EAAE,IAAI;MACdf,UAAU;MACVgB,SAAS,EAAEpC,uBAAuB,CAACoC,SAAS,CAAC;MAC7CC,EAAE,EAAErC,uBAAuB,CAACqC,EAAE,CAAC;MAC/BvB;IACF,CAAC,CAAC;EACJ;AACF;AAIA,MAAMiE,UAAU,SAASjD,YAAY,CAAC;EACpCI,WAAWA,CACTd,UAAkB,EAClBgB,SAAyB,EACzBC,EAAc,EACdvB,OAAuB,EACvB;IACA,KAAK,CAAC;MACJqB,QAAQ,EAAE,KAAK;MACff,UAAU;MACVgB,SAAS,EAAEpC,uBAAuB,CAACoC,SAAS,CAAC;MAC7CC,EAAE,EAAErC,uBAAuB,CAACqC,EAAE,CAAC;MAC/BvB;IACF,CAAC,CAAC;EACJ;AACF;AA4BA,OAAO,SAASkE,gBAAgBA,CAC9BC,SAAiB,EACjBzC,GAAmB,EACnBH,EAAc,EACdvB,OAAuB,EACb;EACV,OAAO,IAAIiE,UAAU,CAACE,SAAS,EAAEzC,GAAG,EAAEH,EAAE,EAAEvB,OAAO,CAAC;AACpD;AA0BA,OAAO,SAASoE,cAAcA,CAC5BD,SAAiB,EACjBzC,GAAmB,EACnBH,EAAc,EACdvB,OAAuB,EACf;EACR,OAAO,IAAIgE,QAAQ,CAACG,SAAS,EAAEzC,GAAG,EAAEH,EAAE,EAAEvB,OAAO,CAAC;AAClD;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASI,QAAQA,CACtBsB,GAAe,EACf2C,KAAiB,EACjB/B,IAAgB;AAChB;AACA;AACAgC,MAA+B;AAC/B;AACA;AACAC,OAAgB,EACJ;EACZ,MAAM3C,WAAW,GAAG1C,uBAAuB,CAACwC,GAAG,CAAC;EAChD,MAAMG,IAAI,GAAG3C,uBAAuB,CAACmF,KAAK,CAAC;EAC3ChE,oBAAoB,CAAC,UAAU,EAAEuB,WAAW,CAACE,UAAU,EAAED,IAAI,CAACC,UAAU,CAAC;EAEzE,MAAMC,OAAO,GACXjD,YAAY,CAACW,kBAAkB,CAAgB,eAAe,CAAC;EACjE,MAAMD,MAAM,GAAGuC,OAAO,CAACC,YAAY,CAAC;IAClCX,QAAQ,EAAE,IAAI;IACdf,UAAU,EAAE,UAAU;IACtBgB,SAAS,EAAEM,WAAW;IACtBL,EAAE,EAAEM;EACN,CAAC,CAAC;EACF,MAAM2C,MAAM,GAAGhF,MAAM,CAAC6C,MAAM,CAACnD,uBAAuB,CAACoD,IAAI,CAAC,CAAC;EAC3D,OAAO,IAAImC,UAAU,CAACD,MAAM,CAAC;AAC/B","ignoreList":[]}

package/lib/module/dsa.js

@@ -19,6 +19,12 @@ export class Dsa {
     this.native.generateKeyPairSync();
   }
 }
+
+// FIPS 186-4 §4.2: only L = 1024, 2048, 3072 are sanctioned. NIST has
+// deprecated DSA-1024 for new applications, but we retain it for
+// interop with legacy systems and match Node's permissive default. We
+// reject anything below 1024 outright.
+const DSA_MIN_MODULUS_LENGTH = 1024;
 function dsa_prepareKeyGenParams(options) {
   if (!options) {
     throw new Error('Options are required for DSA key generation');
@@ -27,8 +33,8 @@ function dsa_prepareKeyGenParams(options) {
     modulusLength,
     divisorLength
   } = options;
-  if (!modulusLength || modulusLength <= 0) {
-    throw new Error('Invalid or missing modulusLength for DSA key generation');
+  if (!modulusLength || modulusLength < DSA_MIN_MODULUS_LENGTH) {
+    throw new RangeError(`DSA modulusLength must be at least ${DSA_MIN_MODULUS_LENGTH} bits ` + `(got ${modulusLength ?? 0})`);
   }
   return new Dsa(modulusLength, divisorLength);
 }

package/lib/module/dsa.js.map

@@ -1 +1 @@
-{"version":3,"names":["NitroModules","Buffer","KeyObject","KFormatType","KeyEncoding","Dsa","constructor","modulusLength","divisorLength","native","createHybridObject","setModulusLength","undefined","setDivisorLength","generateKeyPair","generateKeyPairSync","dsa_prepareKeyGenParams","options","Error","dsa_formatKeyPairOutput","dsa","encoding","publicFormat","privateFormat","cipher","passphrase","publicKeyData","getPublicKey","privateKeyData","getPrivateKey","pub","createKeyObject","DER","SPKI","priv","PKCS8","publicKey","privateKey","format","PEM","exported","handle","exportKey","from","Uint8Array","toString","dsa_generateKeyPairNode","dsa_generateKeyPairNodeSync"],"sourceRoot":"../../src","sources":["dsa.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AACzD,SAASC,MAAM,QAAQ,gCAAgC;AACvD,SAASC,SAAS,QAA2C,gBAAgB;AAG7E,SAASC,WAAW,EAAEC,WAAW,QAAQ,SAAS;AAElD,OAAO,MAAMC,GAAG,CAAC;EAGfC,WAAWA,CAACC,aAAqB,EAAEC,aAAsB,EAAE;IACzD,IAAI,CAACC,MAAM,GAAGT,YAAY,CAACU,kBAAkB,CAAa,YAAY,CAAC;IACvE,IAAI,CAACD,MAAM,CAACE,gBAAgB,CAACJ,aAAa,CAAC;IAC3C,IAAIC,aAAa,KAAKI,SAAS,IAAIJ,aAAa,IAAI,CAAC,EAAE;MACrD,IAAI,CAACC,MAAM,CAACI,gBAAgB,CAACL,aAAa,CAAC;IAC7C;EACF;EAEA,MAAMM,eAAeA,CAAA,EAAkB;IACrC,MAAM,IAAI,CAACL,MAAM,CAACK,eAAe,CAAC,CAAC;EACrC;EAEAC,mBAAmBA,CAAA,EAAS;IAC1B,IAAI,CAACN,MAAM,CAACM,mBAAmB,CAAC,CAAC;EACnC;AACF;AAEA,SAASC,uBAAuBA,CAC9BC,OAA2C,EACtC;EACL,IAAI,CAACA,OAAO,EAAE;IACZ,MAAM,IAAIC,KAAK,CAAC,6CAA6C,CAAC;EAChE;EAEA,MAAM;IAAEX,aAAa;IAAEC;EAAc,CAAC,GAAGS,OAAO;EAEhD,IAAI,CAACV,aAAa,IAAIA,aAAa,IAAI,CAAC,EAAE;IACxC,MAAM,IAAIW,KAAK,CAAC,yDAAyD,CAAC;EAC5E;EAEA,OAAO,IAAIb,GAAG,CAACE,aAAa,EAAEC,aAAa,CAAC;AAC9C;AAEA,SAASW,uBAAuBA,CAC9BC,GAAQ,EACRC,QAA0B,EAI1B;EACA,MAAM;IAAEC,YAAY;IAAEC,aAAa;IAAEC,MAAM;IAAEC;EAAW,CAAC,GAAGJ,QAAQ;EAEpE,MAAMK,aAAa,GAAGN,GAAG,CAACX,MAAM,CAACkB,YAAY,CAAC,CAAC;EAC/C,MAAMC,cAAc,GAAGR,GAAG,CAACX,MAAM,CAACoB,aAAa,CAAC,CAAC;EAEjD,MAAMC,GAAG,GAAG5B,SAAS,CAAC6B,eAAe,CACnC,QAAQ,EACRL,aAAa,EACbvB,WAAW,CAAC6B,GAAG,EACf5B,WAAW,CAAC6B,IACd,CAAoB;EAEpB,MAAMC,IAAI,GAAGhC,SAAS,CAAC6B,eAAe,CACpC,SAAS,EACTH,cAAc,EACdzB,WAAW,CAAC6B,GAAG,EACf5B,WAAW,CAAC+B,KACd,CAAqB;EAErB,IAAIC,SAA0D;EAC9D,IAAIC,UAA4D;EAEhE,IAAIf,YAAY,KAAK,CAAC,CAAC,EAAE;IACvBc,SAAS,GAAGN,GAAG;EACjB,CAAC,MAAM;IACL,MAAMQ,MAAM,GACVhB,YAAY,KAAKnB,WAAW,CAACoC,GAAG,GAAGpC,WAAW,CAACoC,GAAG,GAAGpC,WAAW,CAAC6B,GAAG;IACtE,MAAMQ,QAAQ,GAAGV,GAAG,CAACW,MAAM,CAACC,SAAS,CAACJ,MAAM,EAAElC,WAAW,CAAC6B,IAAI,CAAC;IAC/D,IAAIK,MAAM,KAAKnC,WAAW,CAACoC,GAAG,EAAE;MAC9BH,SAAS,GAAGnC,MAAM,CAAC0C,IAAI,CAAC,IAAIC,UAAU,CAACJ,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACrE,CAAC,MAAM;MACLT,SAAS,GAAGI,QAAQ;IACtB;EACF;EAEA,IAAIjB,aAAa,KAAK,CAAC,CAAC,EAAE;IACxBc,UAAU,GAAGH,IAAI;EACnB,CAAC,MAAM;IACL,MAAMI,MAAM,GACVf,aAAa,KAAKpB,WAAW,CAACoC,GAAG,GAAGpC,WAAW,CAACoC,GAAG,GAAGpC,WAAW,CAAC6B,GAAG;IACvE,MAAMQ,QAAQ,GAAGN,IAAI,CAACO,MAAM,CAACC,SAAS,CACpCJ,MAAM,EACNlC,WAAW,CAAC+B,KAAK,EACjBX,MAAM,EACNC,UACF,CAAC;IACD,IAAIa,MAAM,KAAKnC,WAAW,CAACoC,GAAG,EAAE;MAC9BF,UAAU,GAAGpC,MAAM,CAAC0C,IAAI,CAAC,IAAIC,UAAU,CAACJ,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACtE,CAAC,MAAM;MACLR,UAAU,GAAGG,QAAQ;IACvB;EACF;EAEA,OAAO;IAAEJ,SAAS;IAAEC;EAAW,CAAC;AAClC;AAEA,OAAO,eAAeS,uBAAuBA,CAC3C7B,OAA2C,EAC3CI,QAA0B,EAIzB;EACD,MAAMD,GAAG,GAAGJ,uBAAuB,CAACC,OAAO,CAAC;EAC5C,MAAMG,GAAG,CAACN,eAAe,CAAC,CAAC;EAC3B,OAAOK,uBAAuB,CAACC,GAAG,EAAEC,QAAQ,CAAC;AAC/C;AAEA,OAAO,SAAS0B,2BAA2BA,CACzC9B,OAA2C,EAC3CI,QAA0B,EAI1B;EACA,MAAMD,GAAG,GAAGJ,uBAAuB,CAACC,OAAO,CAAC;EAC5CG,GAAG,CAACL,mBAAmB,CAAC,CAAC;EACzB,OAAOI,uBAAuB,CAACC,GAAG,EAAEC,QAAQ,CAAC;AAC/C","ignoreList":[]}
+{"version":3,"names":["NitroModules","Buffer","KeyObject","KFormatType","KeyEncoding","Dsa","constructor","modulusLength","divisorLength","native","createHybridObject","setModulusLength","undefined","setDivisorLength","generateKeyPair","generateKeyPairSync","DSA_MIN_MODULUS_LENGTH","dsa_prepareKeyGenParams","options","Error","RangeError","dsa_formatKeyPairOutput","dsa","encoding","publicFormat","privateFormat","cipher","passphrase","publicKeyData","getPublicKey","privateKeyData","getPrivateKey","pub","createKeyObject","DER","SPKI","priv","PKCS8","publicKey","privateKey","format","PEM","exported","handle","exportKey","from","Uint8Array","toString","dsa_generateKeyPairNode","dsa_generateKeyPairNodeSync"],"sourceRoot":"../../src","sources":["dsa.ts"],"mappings":";;AAAA,SAASA,YAAY,QAAQ,4BAA4B;AACzD,SAASC,MAAM,QAAQ,gCAAgC;AACvD,SAASC,SAAS,QAA2C,gBAAgB;AAG7E,SAASC,WAAW,EAAEC,WAAW,QAAQ,SAAS;AAElD,OAAO,MAAMC,GAAG,CAAC;EAGfC,WAAWA,CAACC,aAAqB,EAAEC,aAAsB,EAAE;IACzD,IAAI,CAACC,MAAM,GAAGT,YAAY,CAACU,kBAAkB,CAAa,YAAY,CAAC;IACvE,IAAI,CAACD,MAAM,CAACE,gBAAgB,CAACJ,aAAa,CAAC;IAC3C,IAAIC,aAAa,KAAKI,SAAS,IAAIJ,aAAa,IAAI,CAAC,EAAE;MACrD,IAAI,CAACC,MAAM,CAACI,gBAAgB,CAACL,aAAa,CAAC;IAC7C;EACF;EAEA,MAAMM,eAAeA,CAAA,EAAkB;IACrC,MAAM,IAAI,CAACL,MAAM,CAACK,eAAe,CAAC,CAAC;EACrC;EAEAC,mBAAmBA,CAAA,EAAS;IAC1B,IAAI,CAACN,MAAM,CAACM,mBAAmB,CAAC,CAAC;EACnC;AACF;;AAEA;AACA;AACA;AACA;AACA,MAAMC,sBAAsB,GAAG,IAAI;AAEnC,SAASC,uBAAuBA,CAC9BC,OAA2C,EACtC;EACL,IAAI,CAACA,OAAO,EAAE;IACZ,MAAM,IAAIC,KAAK,CAAC,6CAA6C,CAAC;EAChE;EAEA,MAAM;IAAEZ,aAAa;IAAEC;EAAc,CAAC,GAAGU,OAAO;EAEhD,IAAI,CAACX,aAAa,IAAIA,aAAa,GAAGS,sBAAsB,EAAE;IAC5D,MAAM,IAAII,UAAU,CAClB,sCAAsCJ,sBAAsB,QAAQ,GAClE,QAAQT,aAAa,IAAI,CAAC,GAC9B,CAAC;EACH;EAEA,OAAO,IAAIF,GAAG,CAACE,aAAa,EAAEC,aAAa,CAAC;AAC9C;AAEA,SAASa,uBAAuBA,CAC9BC,GAAQ,EACRC,QAA0B,EAI1B;EACA,MAAM;IAAEC,YAAY;IAAEC,aAAa;IAAEC,MAAM;IAAEC;EAAW,CAAC,GAAGJ,QAAQ;EAEpE,MAAMK,aAAa,GAAGN,GAAG,CAACb,MAAM,CAACoB,YAAY,CAAC,CAAC;EAC/C,MAAMC,cAAc,GAAGR,GAAG,CAACb,MAAM,CAACsB,aAAa,CAAC,CAAC;EAEjD,MAAMC,GAAG,GAAG9B,SAAS,CAAC+B,eAAe,CACnC,QAAQ,EACRL,aAAa,EACbzB,WAAW,CAAC+B,GAAG,EACf9B,WAAW,CAAC+B,IACd,CAAoB;EAEpB,MAAMC,IAAI,GAAGlC,SAAS,CAAC+B,eAAe,CACpC,SAAS,EACTH,cAAc,EACd3B,WAAW,CAAC+B,GAAG,EACf9B,WAAW,CAACiC,KACd,CAAqB;EAErB,IAAIC,SAA0D;EAC9D,IAAIC,UAA4D;EAEhE,IAAIf,YAAY,KAAK,CAAC,CAAC,EAAE;IACvBc,SAAS,GAAGN,GAAG;EACjB,CAAC,MAAM;IACL,MAAMQ,MAAM,GACVhB,YAAY,KAAKrB,WAAW,CAACsC,GAAG,GAAGtC,WAAW,CAACsC,GAAG,GAAGtC,WAAW,CAAC+B,GAAG;IACtE,MAAMQ,QAAQ,GAAGV,GAAG,CAACW,MAAM,CAACC,SAAS,CAACJ,MAAM,EAAEpC,WAAW,CAAC+B,IAAI,CAAC;IAC/D,IAAIK,MAAM,KAAKrC,WAAW,CAACsC,GAAG,EAAE;MAC9BH,SAAS,GAAGrC,MAAM,CAAC4C,IAAI,CAAC,IAAIC,UAAU,CAACJ,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACrE,CAAC,MAAM;MACLT,SAAS,GAAGI,QAAQ;IACtB;EACF;EAEA,IAAIjB,aAAa,KAAK,CAAC,CAAC,EAAE;IACxBc,UAAU,GAAGH,IAAI;EACnB,CAAC,MAAM;IACL,MAAMI,MAAM,GACVf,aAAa,KAAKtB,WAAW,CAACsC,GAAG,GAAGtC,WAAW,CAACsC,GAAG,GAAGtC,WAAW,CAAC+B,GAAG;IACvE,MAAMQ,QAAQ,GAAGN,IAAI,CAACO,MAAM,CAACC,SAAS,CACpCJ,MAAM,EACNpC,WAAW,CAACiC,KAAK,EACjBX,MAAM,EACNC,UACF,CAAC;IACD,IAAIa,MAAM,KAAKrC,WAAW,CAACsC,GAAG,EAAE;MAC9BF,UAAU,GAAGtC,MAAM,CAAC4C,IAAI,CAAC,IAAIC,UAAU,CAACJ,QAAQ,CAAC,CAAC,CAACK,QAAQ,CAAC,OAAO,CAAC;IACtE,CAAC,MAAM;MACLR,UAAU,GAAGG,QAAQ;IACvB;EACF;EAEA,OAAO;IAAEJ,SAAS;IAAEC;EAAW,CAAC;AAClC;AAEA,OAAO,eAAeS,uBAAuBA,CAC3C9B,OAA2C,EAC3CK,QAA0B,EAIzB;EACD,MAAMD,GAAG,GAAGL,uBAAuB,CAACC,OAAO,CAAC;EAC5C,MAAMI,GAAG,CAACR,eAAe,CAAC,CAAC;EAC3B,OAAOO,uBAAuB,CAACC,GAAG,EAAEC,QAAQ,CAAC;AAC/C;AAEA,OAAO,SAAS0B,2BAA2BA,CACzC/B,OAA2C,EAC3CK,QAA0B,EAI1B;EACA,MAAMD,GAAG,GAAGL,uBAAuB,CAACC,OAAO,CAAC;EAC5CI,GAAG,CAACP,mBAAmB,CAAC,CAAC;EACzB,OAAOM,uBAAuB,CAACC,GAAG,EAAEC,QAAQ,CAAC;AAC/C","ignoreList":[]}

package/lib/module/hash.js

@@ -133,14 +133,24 @@ class Hash extends Stream.Transform {
     return this.native.getOpenSSLVersion();
   }
 
-  // stream interface
+  // Stream interface — surface synchronous errors via the callback so
+  // they emit as stream 'error' events instead of throwing out of the
+  // Transform plumbing (which would crash the host pipeline).
   _transform(chunk, encoding, callback) {
-    this.update(chunk, encoding);
-    callback();
+    try {
+      this.update(chunk, encoding);
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
   _flush(callback) {
-    this.push(this.digest());
-    callback();
+    try {
+      this.push(this.digest());
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
 }
 

package/lib/module/hash.js.map

@@ -1 +1 @@
-{"version":3,"names":["Stream","NitroModules","Buffer","ab2str","binaryLikeToArrayBuffer","bufferLikeToArrayBuffer","validateMaxBufferLength","lazyDOMException","normalizeHashName","HashUtils","native","createHybridObject","getSupportedHashAlgorithms","getHashes","Hash","Transform","validate","args","algorithm","length","Error","options","outputLength","undefined","constructor","createHash","update","data","inputEncoding","defaultEncoding","digest","encoding","nativeDigest","from","copy","newOptions","newNativeHash","hash","getOpenSSLVersion","_transform","chunk","callback","_flush","push","asyncDigest","name","internalDigest","normalizedHashName","result","arrayBuffer","ArrayBuffer","view","Uint8Array","set","outputEncoding","h","hashExports"],"sourceRoot":"../../src","sources":["hash.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,iBAAiB;AACxC,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,MAAM,QAAQ,gCAAgC;AAQvD,SACEC,MAAM,EACNC,uBAAuB,EACvBC,uBAAuB,QAClB,SAAS;AAChB,SAASC,uBAAuB,QAAQ,oBAAoB;AAC5D,SAASC,gBAAgB,QAAQ,gBAAgB;AACjD,SAASC,iBAAiB,QAAQ,mBAAmB;AAErD,MAAMC,SAAS,CAAC;EACd,OAAeC,MAAM,GAAGT,YAAY,CAACU,kBAAkB,CAAa,MAAM,CAAC;EAC3E,OAAcC,0BAA0BA,CAAA,EAAa;IACnD,OAAO,IAAI,CAACF,MAAM,CAACE,0BAA0B,CAAC,CAAC;EACjD;AACF;AAEA,OAAO,SAASC,SAASA,CAAA,EAAG;EAC1B,OAAOJ,SAAS,CAACG,0BAA0B,CAAC,CAAC;AAC/C;AAgBA,MAAME,IAAI,SAASd,MAAM,CAACe,SAAS,CAAC;EAK1BC,QAAQA,CAACC,IAAc,EAAE;IAC/B,IAAI,OAAOA,IAAI,CAACC,SAAS,KAAK,QAAQ,IAAID,IAAI,CAACC,SAAS,CAACC,MAAM,KAAK,CAAC,EACnE,MAAM,IAAIC,KAAK,CAAC,sCAAsC,CAAC;IACzD,IACEH,IAAI,CAACI,OAAO,EAAEC,YAAY,KAAKC,SAAS,IACxCN,IAAI,CAACI,OAAO,CAACC,YAAY,GAAG,CAAC,EAE7B,MAAM,IAAIF,KAAK,CAAC,6CAA6C,CAAC;IAChE,IACEH,IAAI,CAACI,OAAO,EAAEC,YAAY,KAAKC,SAAS,IACxC,OAAON,IAAI,CAACI,OAAO,CAACC,YAAY,KAAK,QAAQ,EAE7C,MAAM,IAAIF,KAAK,CAAC,gCAAgC,CAAC;EACrD;;EAEA;AACF;AACA;EACUI,WAAWA,CAACP,IAAc,EAAE;IAClC,KAAK,CAACA,IAAI,CAACI,OAAO,CAAC;IAEnB,IAAI,CAACL,QAAQ,CAACC,IAAI,CAAC;IAEnB,IAAI,CAACC,SAAS,GAAGD,IAAI,CAACC,SAAS;IAC/B,IAAI,CAACG,OAAO,GAAGJ,IAAI,CAACI,OAAO,IAAI,CAAC,CAAC;IAEjC,IAAIJ,IAAI,CAACP,MAAM,EAAE;MACf,IAAI,CAACA,MAAM,GAAGO,IAAI,CAACP,MAAM;MACzB;IACF;IAEA,IAAI,CAACA,MAAM,GAAGT,YAAY,CAACU,kBAAkB,CAAa,MAAM,CAAC;IACjE,IAAI,CAACD,MAAM,CAACe,UAAU,CAAC,IAAI,CAACP,SAAS,EAAE,IAAI,CAACG,OAAO,CAACC,YAAY,CAAC;EACnE;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEI,MAAMA,CAACC,IAAgB,EAAEC,aAAwB,EAAiB;IAChE,MAAMC,eAAyB,GAAG,MAAM;IACxCD,aAAa,GAAGA,aAAa,IAAIC,eAAe;;IAEhD;IACA,IAAI,OAAOF,IAAI,KAAK,QAAQ,IAAIC,aAAa,KAAK,MAAM,EAAE;MACxD,IAAI,CAAClB,MAAM,CAACgB,MAAM,CAACC,IAAI,CAAC;IAC1B,CAAC,MAAM;MACL,IAAI,CAACjB,MAAM,CAACgB,MAAM,CAACtB,uBAAuB,CAACuB,IAAI,EAAEC,aAAa,CAAC,CAAC;IAClE;IAEA,OAAO,IAAI,CAAC,CAAC;EACf;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEE,MAAMA,CAACC,QAAmB,EAAmB;IAC3C,MAAMC,YAAY,GAAG,IAAI,CAACtB,MAAM,CAACoB,MAAM,CAACC,QAAQ,CAAC;IAEjD,IAAIA,QAAQ,IAAIA,QAAQ,KAAK,QAAQ,EAAE;MACrC,OAAO5B,MAAM,CAAC6B,YAAY,EAAED,QAAQ,CAAC;IACvC;IAEA,OAAO7B,MAAM,CAAC+B,IAAI,CAACD,YAAY,CAAC;EAClC;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEE,IAAIA,CAACb,OAAqB,EAAQ;IAChC,MAAMc,UAAU,GAAGd,OAAO,IAAI,IAAI,CAACA,OAAO;IAC1C,MAAMe,aAAa,GAAG,IAAI,CAAC1B,MAAM,CAACwB,IAAI,CAACC,UAAU,CAACb,YAAY,CAAC;IAC/D,MAAMe,IAAI,GAAG,IAAIvB,IAAI,CAAC;MACpBI,SAAS,EAAE,IAAI,CAACA,SAAS;MACzBG,OAAO,EAAEc,UAAU;MACnBzB,MAAM,EAAE0B;IACV,CAAC,CAAC;IACF,OAAOC,IAAI;EACb;;EAEA;AACF;AACA;AACA;EACEC,iBAAiBA,CAAA,EAAW;IAC1B,OAAO,IAAI,CAAC5B,MAAM,CAAC4B,iBAAiB,CAAC,CAAC;EACxC;;EAEA;EACAC,UAAUA,CACRC,KAAiB,EACjBT,QAAwB,EACxBU,QAAoB,EACpB;IACA,IAAI,CAACf,MAAM,CAACc,KAAK,EAAET,QAAoB,CAAC;IACxCU,QAAQ,CAAC,CAAC;EACZ;EACAC,MAAMA,CAACD,QAAoB,EAAE;IAC3B,IAAI,CAACE,IAAI,CAAC,IAAI,CAACb,MAAM,CAAC,CAAC,CAAC;IACxBW,QAAQ,CAAC,CAAC;EACZ;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAAShB,UAAUA,CAACP,SAAiB,EAAEG,OAAqB,EAAQ;EACzE;EACA,OAAO,IAAIP,IAAI,CAAC;IACdI,SAAS;IACTG;EACF,CAAC,CAAC;AACJ;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMuB,WAAW,GAAG,MAAAA,CACzB1B,SAA0B,EAC1BS,IAAgB,KACS;EACzBrB,uBAAuB,CAACqB,IAAI,EAAE,MAAM,CAAC;EAErC,MAAMkB,IAAI,GAAG3B,SAAS,CAAC2B,IAAI;EAE3B,IACEA,IAAI,KAAK,OAAO,IAChBA,IAAI,KAAK,SAAS,IAClBA,IAAI,KAAK,SAAS,IAClBA,IAAI,KAAK,SAAS,IAClBA,IAAI,KAAK,UAAU,IACnBA,IAAI,KAAK,UAAU,IACnBA,IAAI,KAAK,UAAU,EACnB;IACA,OAAOC,cAAc,CAAC5B,SAAS,EAAES,IAAI,CAAC;EACxC;EAEA,IAAIkB,IAAI,KAAK,WAAW,IAAIA,IAAI,KAAK,WAAW,EAAE;IAChD,IAAI,OAAO3B,SAAS,CAACC,MAAM,KAAK,QAAQ,IAAID,SAAS,CAACC,MAAM,IAAI,CAAC,EAAE;MACjE,MAAMZ,gBAAgB,CACpB,oCAAoC,EACpC,gBACF,CAAC;IACH;IACA,IAAIW,SAAS,CAACC,MAAM,GAAG,CAAC,EAAE;MACxB,MAAMZ,gBAAgB,CACpB,iCAAiC,EACjC,mBACF,CAAC;IACH;IACA,OAAOuC,cAAc,CAAC5B,SAAS,EAAES,IAAI,EAAET,SAAS,CAACC,MAAM,CAAC;EAC1D;EAEA,MAAMZ,gBAAgB,CACpB,gCAAgCsC,IAAI,EAAE,EACtC,mBACF,CAAC;AACH,CAAC;AAED,MAAMC,cAAc,GAAGA,CACrB5B,SAA0B,EAC1BS,IAAgB,EAChBL,YAAqB,KACL;EAChB,MAAMyB,kBAAkB,GAAGvC,iBAAiB,CAACU,SAAS,CAAC2B,IAAI,CAAC;EAC5D,MAAMR,IAAI,GAAGZ,UAAU,CACrBsB,kBAAkB,EAClBzB,YAAY,GAAG;IAAEA;EAAa,CAAC,GAAGC,SACpC,CAAC;EACDc,IAAI,CAACX,MAAM,CAACrB,uBAAuB,CAACsB,IAAI,CAAC,CAAC;EAC1C,MAAMqB,MAAM,GAAGX,IAAI,CAACP,MAAM,CAAC,CAAC;EAC5B,MAAMmB,WAAW,GAAG,IAAIC,WAAW,CAACF,MAAM,CAAC7B,MAAM,CAAC;EAClD,MAAMgC,IAAI,GAAG,IAAIC,UAAU,CAACH,WAAW,CAAC;EACxCE,IAAI,CAACE,GAAG,CAACL,MAAM,CAAC;EAChB,OAAOC,WAAW;AACpB,CAAC;AAQD,OAAO,SAASZ,IAAIA,CAClBnB,SAAiB,EACjBS,IAAgB,EAChB2B,cAAyB,EACR;EACjB,MAAMC,CAAC,GAAG9B,UAAU,CAACP,SAAS,CAAC;EAC/BqC,CAAC,CAAC7B,MAAM,CAACC,IAAI,CAAC;EACd,OAAO2B,cAAc,GAAGC,CAAC,CAACzB,MAAM,CAACwB,cAAc,CAAC,GAAGC,CAAC,CAACzB,MAAM,CAAC,CAAC;AAC/D;AAEA,OAAO,MAAM0B,WAAW,GAAG;EACzB/B,UAAU;EACVZ,SAAS;EACTwB,IAAI;EACJO;AACF,CAAC","ignoreList":[]}
+{"version":3,"names":["Stream","NitroModules","Buffer","ab2str","binaryLikeToArrayBuffer","bufferLikeToArrayBuffer","validateMaxBufferLength","lazyDOMException","normalizeHashName","HashUtils","native","createHybridObject","getSupportedHashAlgorithms","getHashes","Hash","Transform","validate","args","algorithm","length","Error","options","outputLength","undefined","constructor","createHash","update","data","inputEncoding","defaultEncoding","digest","encoding","nativeDigest","from","copy","newOptions","newNativeHash","hash","getOpenSSLVersion","_transform","chunk","callback","err","_flush","push","asyncDigest","name","internalDigest","normalizedHashName","result","arrayBuffer","ArrayBuffer","view","Uint8Array","set","outputEncoding","h","hashExports"],"sourceRoot":"../../src","sources":["hash.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,iBAAiB;AACxC,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,MAAM,QAAQ,gCAAgC;AAQvD,SACEC,MAAM,EACNC,uBAAuB,EACvBC,uBAAuB,QAClB,SAAS;AAChB,SAASC,uBAAuB,QAAQ,oBAAoB;AAC5D,SAASC,gBAAgB,QAAQ,gBAAgB;AACjD,SAASC,iBAAiB,QAAQ,mBAAmB;AAErD,MAAMC,SAAS,CAAC;EACd,OAAeC,MAAM,GAAGT,YAAY,CAACU,kBAAkB,CAAa,MAAM,CAAC;EAC3E,OAAcC,0BAA0BA,CAAA,EAAa;IACnD,OAAO,IAAI,CAACF,MAAM,CAACE,0BAA0B,CAAC,CAAC;EACjD;AACF;AAEA,OAAO,SAASC,SAASA,CAAA,EAAG;EAC1B,OAAOJ,SAAS,CAACG,0BAA0B,CAAC,CAAC;AAC/C;AAgBA,MAAME,IAAI,SAASd,MAAM,CAACe,SAAS,CAAC;EAK1BC,QAAQA,CAACC,IAAc,EAAE;IAC/B,IAAI,OAAOA,IAAI,CAACC,SAAS,KAAK,QAAQ,IAAID,IAAI,CAACC,SAAS,CAACC,MAAM,KAAK,CAAC,EACnE,MAAM,IAAIC,KAAK,CAAC,sCAAsC,CAAC;IACzD,IACEH,IAAI,CAACI,OAAO,EAAEC,YAAY,KAAKC,SAAS,IACxCN,IAAI,CAACI,OAAO,CAACC,YAAY,GAAG,CAAC,EAE7B,MAAM,IAAIF,KAAK,CAAC,6CAA6C,CAAC;IAChE,IACEH,IAAI,CAACI,OAAO,EAAEC,YAAY,KAAKC,SAAS,IACxC,OAAON,IAAI,CAACI,OAAO,CAACC,YAAY,KAAK,QAAQ,EAE7C,MAAM,IAAIF,KAAK,CAAC,gCAAgC,CAAC;EACrD;;EAEA;AACF;AACA;EACUI,WAAWA,CAACP,IAAc,EAAE;IAClC,KAAK,CAACA,IAAI,CAACI,OAAO,CAAC;IAEnB,IAAI,CAACL,QAAQ,CAACC,IAAI,CAAC;IAEnB,IAAI,CAACC,SAAS,GAAGD,IAAI,CAACC,SAAS;IAC/B,IAAI,CAACG,OAAO,GAAGJ,IAAI,CAACI,OAAO,IAAI,CAAC,CAAC;IAEjC,IAAIJ,IAAI,CAACP,MAAM,EAAE;MACf,IAAI,CAACA,MAAM,GAAGO,IAAI,CAACP,MAAM;MACzB;IACF;IAEA,IAAI,CAACA,MAAM,GAAGT,YAAY,CAACU,kBAAkB,CAAa,MAAM,CAAC;IACjE,IAAI,CAACD,MAAM,CAACe,UAAU,CAAC,IAAI,CAACP,SAAS,EAAE,IAAI,CAACG,OAAO,CAACC,YAAY,CAAC;EACnE;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEI,MAAMA,CAACC,IAAgB,EAAEC,aAAwB,EAAiB;IAChE,MAAMC,eAAyB,GAAG,MAAM;IACxCD,aAAa,GAAGA,aAAa,IAAIC,eAAe;;IAEhD;IACA,IAAI,OAAOF,IAAI,KAAK,QAAQ,IAAIC,aAAa,KAAK,MAAM,EAAE;MACxD,IAAI,CAAClB,MAAM,CAACgB,MAAM,CAACC,IAAI,CAAC;IAC1B,CAAC,MAAM;MACL,IAAI,CAACjB,MAAM,CAACgB,MAAM,CAACtB,uBAAuB,CAACuB,IAAI,EAAEC,aAAa,CAAC,CAAC;IAClE;IAEA,OAAO,IAAI,CAAC,CAAC;EACf;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEE,MAAMA,CAACC,QAAmB,EAAmB;IAC3C,MAAMC,YAAY,GAAG,IAAI,CAACtB,MAAM,CAACoB,MAAM,CAACC,QAAQ,CAAC;IAEjD,IAAIA,QAAQ,IAAIA,QAAQ,KAAK,QAAQ,EAAE;MACrC,OAAO5B,MAAM,CAAC6B,YAAY,EAAED,QAAQ,CAAC;IACvC;IAEA,OAAO7B,MAAM,CAAC+B,IAAI,CAACD,YAAY,CAAC;EAClC;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEE,IAAIA,CAACb,OAAqB,EAAQ;IAChC,MAAMc,UAAU,GAAGd,OAAO,IAAI,IAAI,CAACA,OAAO;IAC1C,MAAMe,aAAa,GAAG,IAAI,CAAC1B,MAAM,CAACwB,IAAI,CAACC,UAAU,CAACb,YAAY,CAAC;IAC/D,MAAMe,IAAI,GAAG,IAAIvB,IAAI,CAAC;MACpBI,SAAS,EAAE,IAAI,CAACA,SAAS;MACzBG,OAAO,EAAEc,UAAU;MACnBzB,MAAM,EAAE0B;IACV,CAAC,CAAC;IACF,OAAOC,IAAI;EACb;;EAEA;AACF;AACA;AACA;EACEC,iBAAiBA,CAAA,EAAW;IAC1B,OAAO,IAAI,CAAC5B,MAAM,CAAC4B,iBAAiB,CAAC,CAAC;EACxC;;EAEA;EACA;EACA;EACAC,UAAUA,CACRC,KAAiB,EACjBT,QAAwB,EACxBU,QAAsC,EACtC;IACA,IAAI;MACF,IAAI,CAACf,MAAM,CAACc,KAAK,EAAET,QAAoB,CAAC;MACxCU,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZD,QAAQ,CAACC,GAAY,CAAC;IACxB;EACF;EACAC,MAAMA,CAACF,QAAsC,EAAE;IAC7C,IAAI;MACF,IAAI,CAACG,IAAI,CAAC,IAAI,CAACd,MAAM,CAAC,CAAC,CAAC;MACxBW,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZD,QAAQ,CAACC,GAAY,CAAC;IACxB;EACF;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASjB,UAAUA,CAACP,SAAiB,EAAEG,OAAqB,EAAQ;EACzE;EACA,OAAO,IAAIP,IAAI,CAAC;IACdI,SAAS;IACTG;EACF,CAAC,CAAC;AACJ;;AAEA;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,MAAMwB,WAAW,GAAG,MAAAA,CACzB3B,SAA0B,EAC1BS,IAAgB,KACS;EACzBrB,uBAAuB,CAACqB,IAAI,EAAE,MAAM,CAAC;EAErC,MAAMmB,IAAI,GAAG5B,SAAS,CAAC4B,IAAI;EAE3B,IACEA,IAAI,KAAK,OAAO,IAChBA,IAAI,KAAK,SAAS,IAClBA,IAAI,KAAK,SAAS,IAClBA,IAAI,KAAK,SAAS,IAClBA,IAAI,KAAK,UAAU,IACnBA,IAAI,KAAK,UAAU,IACnBA,IAAI,KAAK,UAAU,EACnB;IACA,OAAOC,cAAc,CAAC7B,SAAS,EAAES,IAAI,CAAC;EACxC;EAEA,IAAImB,IAAI,KAAK,WAAW,IAAIA,IAAI,KAAK,WAAW,EAAE;IAChD,IAAI,OAAO5B,SAAS,CAACC,MAAM,KAAK,QAAQ,IAAID,SAAS,CAACC,MAAM,IAAI,CAAC,EAAE;MACjE,MAAMZ,gBAAgB,CACpB,oCAAoC,EACpC,gBACF,CAAC;IACH;IACA,IAAIW,SAAS,CAACC,MAAM,GAAG,CAAC,EAAE;MACxB,MAAMZ,gBAAgB,CACpB,iCAAiC,EACjC,mBACF,CAAC;IACH;IACA,OAAOwC,cAAc,CAAC7B,SAAS,EAAES,IAAI,EAAET,SAAS,CAACC,MAAM,CAAC;EAC1D;EAEA,MAAMZ,gBAAgB,CACpB,gCAAgCuC,IAAI,EAAE,EACtC,mBACF,CAAC;AACH,CAAC;AAED,MAAMC,cAAc,GAAGA,CACrB7B,SAA0B,EAC1BS,IAAgB,EAChBL,YAAqB,KACL;EAChB,MAAM0B,kBAAkB,GAAGxC,iBAAiB,CAACU,SAAS,CAAC4B,IAAI,CAAC;EAC5D,MAAMT,IAAI,GAAGZ,UAAU,CACrBuB,kBAAkB,EAClB1B,YAAY,GAAG;IAAEA;EAAa,CAAC,GAAGC,SACpC,CAAC;EACDc,IAAI,CAACX,MAAM,CAACrB,uBAAuB,CAACsB,IAAI,CAAC,CAAC;EAC1C,MAAMsB,MAAM,GAAGZ,IAAI,CAACP,MAAM,CAAC,CAAC;EAC5B,MAAMoB,WAAW,GAAG,IAAIC,WAAW,CAACF,MAAM,CAAC9B,MAAM,CAAC;EAClD,MAAMiC,IAAI,GAAG,IAAIC,UAAU,CAACH,WAAW,CAAC;EACxCE,IAAI,CAACE,GAAG,CAACL,MAAM,CAAC;EAChB,OAAOC,WAAW;AACpB,CAAC;AAQD,OAAO,SAASb,IAAIA,CAClBnB,SAAiB,EACjBS,IAAgB,EAChB4B,cAAyB,EACR;EACjB,MAAMC,CAAC,GAAG/B,UAAU,CAACP,SAAS,CAAC;EAC/BsC,CAAC,CAAC9B,MAAM,CAACC,IAAI,CAAC;EACd,OAAO4B,cAAc,GAAGC,CAAC,CAAC1B,MAAM,CAACyB,cAAc,CAAC,GAAGC,CAAC,CAAC1B,MAAM,CAAC,CAAC;AAC/D;AAEA,OAAO,MAAM2B,WAAW,GAAG;EACzBhC,UAAU;EACVZ,SAAS;EACTwB,IAAI;EACJQ;AACF,CAAC","ignoreList":[]}

package/lib/module/hkdf.js

@@ -23,6 +23,36 @@ function sanitizeInput(input, name) {
     throw new Error(`${name} must be a string, a Buffer, a typed array, or a DataView`);
   }
 }
+
+// Output byte-length of each fixed-length digest. HKDF requires a fixed-
+// output hash (it builds on HMAC), so XOFs like SHAKE128/256 are not
+// included even though `normalizeHashName` will accept them — passing
+// SHAKE here is a caller bug we surface as `Unsupported HKDF digest`
+// instead of letting the native side return an opaque error.
+const HKDF_HASH_BYTES = {
+  sha1: 20,
+  sha224: 28,
+  sha256: 32,
+  sha384: 48,
+  sha512: 64,
+  'sha3-256': 32,
+  'sha3-384': 48,
+  'sha3-512': 64,
+  ripemd160: 20
+};
+function validateHkdfKeylen(digest, keylen) {
+  if (typeof keylen !== 'number' || !Number.isFinite(keylen) || !Number.isInteger(keylen) || keylen < 0 || keylen > 0x7fff_ffff) {
+    throw new TypeError('Bad key length');
+  }
+  const hashLen = HKDF_HASH_BYTES[digest.toLowerCase()];
+  if (hashLen === undefined) {
+    throw new TypeError(`Unsupported HKDF digest: ${digest}`);
+  }
+  // RFC 5869 §2.3: L ≤ 255 * HashLen.
+  if (keylen > 255 * hashLen) {
+    throw new RangeError(`HKDF keylen ${keylen} exceeds RFC 5869 ceiling ` + `255 * HashLen (${255 * hashLen}) for ${digest}`);
+  }
+}
 export function hkdf(digest, key, salt, info, keylen, callback) {
   validateCallback(callback);
   try {
@@ -30,9 +60,7 @@ export function hkdf(digest, key, salt, info, keylen, callback) {
     const sanitizedKey = sanitizeInput(key, 'Key');
     const sanitizedSalt = sanitizeInput(salt, 'Salt');
     const sanitizedInfo = sanitizeInput(info, 'Info');
-    if (keylen < 0) {
-      throw new TypeError('Bad key length');
-    }
+    validateHkdfKeylen(normalizedDigest, keylen);
     const nativeMod = getNative();
     nativeMod.deriveKey(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen).then(res => {
       callback(null, Buffer.from(res));
@@ -48,9 +76,7 @@ export function hkdfSync(digest, key, salt, info, keylen) {
   const sanitizedKey = sanitizeInput(key, 'Key');
   const sanitizedSalt = sanitizeInput(salt, 'Salt');
   const sanitizedInfo = sanitizeInput(info, 'Info');
-  if (keylen < 0) {
-    throw new TypeError('Bad key length');
-  }
+  validateHkdfKeylen(normalizedDigest, keylen);
   const nativeMod = getNative();
   const result = nativeMod.deriveKeySync(normalizedDigest, sanitizedKey, sanitizedSalt, sanitizedInfo, keylen);
   return Buffer.from(result);
@@ -68,6 +94,7 @@ export function hkdfDeriveBits(algorithm, baseKey, length) {
   const keylen = Math.ceil(length / 8);
   const hashName = typeof hash === 'string' ? hash : hash.name;
   const normalizedDigest = normalizeHashName(hashName);
+  validateHkdfKeylen(normalizedDigest, keylen);
   const nativeMod = getNative();
   const result = nativeMod.deriveKeySync(normalizedDigest, binaryLikeToArrayBuffer(keyBuffer), binaryLikeToArrayBuffer(salt), binaryLikeToArrayBuffer(info), keylen);
   return result;

package/lib/module/hkdf.js.map

@@ -1 +1 @@
-{"version":3,"names":["Buffer","NitroModules","binaryLikeToArrayBuffer","normalizeHashName","native","getNative","createHybridObject","validateCallback","callback","undefined","Error","sanitizeInput","input","name","hkdf","digest","key","salt","info","keylen","normalizedDigest","sanitizedKey","sanitizedSalt","sanitizedInfo","TypeError","nativeMod","deriveKey","then","res","from","err","hkdfSync","result","deriveKeySync","hkdfDeriveBits","algorithm","baseKey","length","hash","keyBuffer","keyObject","export","Math","ceil","hashName"],"sourceRoot":"../../src","sources":["hkdf.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,SAAS;AAmBpE;AACA,IAAIC,MAAkB;AACtB,SAASC,SAASA,CAAA,EAAe;EAC/B,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGH,YAAY,CAACK,kBAAkB,CAAa,MAAM,CAAC;EAC9D;EACA,OAAOF,MAAM;AACf;AAEA,SAASG,gBAAgBA,CAACC,QAAsB,EAAE;EAChD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAOX,uBAAuB,CAACU,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;AAEA,OAAO,SAASC,IAAIA,CAClBC,MAAc,EACdC,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVC,MAAc,EACdX,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAMY,gBAAgB,GAAGjB,iBAAiB,CAACY,MAAM,CAAC;IAClD,MAAMM,YAAY,GAAGV,aAAa,CAACK,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMM,aAAa,GAAGX,aAAa,CAACM,IAAI,EAAE,MAAM,CAAC;IACjD,MAAMM,aAAa,GAAGZ,aAAa,CAACO,IAAI,EAAE,MAAM,CAAC;IAEjD,IAAIC,MAAM,GAAG,CAAC,EAAE;MACd,MAAM,IAAIK,SAAS,CAAC,gBAAgB,CAAC;IACvC;IAEA,MAAMC,SAAS,GAAGpB,SAAS,CAAC,CAAC;IAC7BoB,SAAS,CACNC,SAAS,CACRN,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbJ,MACF,CAAC,CACAQ,IAAI,CACHC,GAAG,IAAI;MACLpB,QAAQ,CAAC,IAAI,EAAER,MAAM,CAAC6B,IAAI,CAACD,GAAG,CAAC,CAAC;IAClC,CAAC,EACDE,GAAG,IAAI;MACLtB,QAAQ,CAACsB,GAAG,CAAC;IACf,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZtB,QAAQ,CAACsB,GAAY,CAAC;EACxB;AACF;AAEA,OAAO,SAASC,QAAQA,CACtBhB,MAAc,EACdC,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVC,MAAc,EACN;EACR,MAAMC,gBAAgB,GAAGjB,iBAAiB,CAACY,MAAM,CAAC;EAClD,MAAMM,YAAY,GAAGV,aAAa,CAACK,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMM,aAAa,GAAGX,aAAa,CAACM,IAAI,EAAE,MAAM,CAAC;EACjD,MAAMM,aAAa,GAAGZ,aAAa,CAACO,IAAI,EAAE,MAAM,CAAC;EAEjD,IAAIC,MAAM,GAAG,CAAC,EAAE;IACd,MAAM,IAAIK,SAAS,CAAC,gBAAgB,CAAC;EACvC;EAEA,MAAMC,SAAS,GAAGpB,SAAS,CAAC,CAAC;EAC7B,MAAM2B,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCb,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbJ,MACF,CAAC;EAED,OAAOnB,MAAM,CAAC6B,IAAI,CAACG,MAAM,CAAC;AAC5B;AAEA,OAAO,SAASE,cAAcA,CAC5BC,SAAwB,EACxBC,OAAkB,EAClBC,MAAc,EACD;EACb,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI;EAC3B,MAAMrB,IAAI,GAAGkB,SAAS,CAAClB,IAAI;EAC3B,MAAMC,IAAI,GAAGiB,SAAS,CAACjB,IAAI;;EAE3B;EACA;EACA,MAAMqB,SAAS,GAAGH,OAAO,CAACI,SAAS,CAACC,MAAM,CAAC,CAAC;;EAE5C;EACA,MAAMtB,MAAM,GAAGuB,IAAI,CAACC,IAAI,CAACN,MAAM,GAAG,CAAC,CAAC;EAEpC,MAAMO,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAACzB,IAAI;EAC5D,MAAMO,gBAAgB,GAAGjB,iBAAiB,CAACyC,QAAQ,CAAC;EAEpD,MAAMnB,SAAS,GAAGpB,SAAS,CAAC,CAAC;EAC7B,MAAM2B,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCb,gBAAgB,EAChBlB,uBAAuB,CAACqC,SAAS,CAAC,EAClCrC,uBAAuB,CAACe,IAAI,CAAC,EAC7Bf,uBAAuB,CAACgB,IAAI,CAAC,EAC7BC,MACF,CAAC;EAED,OAAOa,MAAM;AACf","ignoreList":[]}
+{"version":3,"names":["Buffer","NitroModules","binaryLikeToArrayBuffer","normalizeHashName","native","getNative","createHybridObject","validateCallback","callback","undefined","Error","sanitizeInput","input","name","HKDF_HASH_BYTES","sha1","sha224","sha256","sha384","sha512","ripemd160","validateHkdfKeylen","digest","keylen","Number","isFinite","isInteger","TypeError","hashLen","toLowerCase","RangeError","hkdf","key","salt","info","normalizedDigest","sanitizedKey","sanitizedSalt","sanitizedInfo","nativeMod","deriveKey","then","res","from","err","hkdfSync","result","deriveKeySync","hkdfDeriveBits","algorithm","baseKey","length","hash","keyBuffer","keyObject","export","Math","ceil","hashName"],"sourceRoot":"../../src","sources":["hkdf.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,YAAY,QAAQ,4BAA4B;AAEzD,SAASC,uBAAuB,EAAEC,iBAAiB,QAAQ,SAAS;AAmBpE;AACA,IAAIC,MAAkB;AACtB,SAASC,SAASA,CAAA,EAAe;EAC/B,IAAID,MAAM,IAAI,IAAI,EAAE;IAClBA,MAAM,GAAGH,YAAY,CAACK,kBAAkB,CAAa,MAAM,CAAC;EAC9D;EACA,OAAOF,MAAM;AACf;AAEA,SAASG,gBAAgBA,CAACC,QAAsB,EAAE;EAChD,IAAIA,QAAQ,KAAKC,SAAS,IAAI,OAAOD,QAAQ,KAAK,UAAU,EAAE;IAC5D,MAAM,IAAIE,KAAK,CAAC,8BAA8B,CAAC;EACjD;AACF;AAEA,SAASC,aAAaA,CAACC,KAAiB,EAAEC,IAAY,EAAe;EACnE,IAAI;IACF,OAAOX,uBAAuB,CAACU,KAAK,CAAC;EACvC,CAAC,CAAC,MAAM;IACN,MAAM,IAAIF,KAAK,CACb,GAAGG,IAAI,2DACT,CAAC;EACH;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA,MAAMC,eAAiD,GAAG;EACxDC,IAAI,EAAE,EAAE;EACRC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACVC,MAAM,EAAE,EAAE;EACV,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACd,UAAU,EAAE,EAAE;EACdC,SAAS,EAAE;AACb,CAAC;AAED,SAASC,kBAAkBA,CAACC,MAAc,EAAEC,MAAc,EAAQ;EAChE,IACE,OAAOA,MAAM,KAAK,QAAQ,IAC1B,CAACC,MAAM,CAACC,QAAQ,CAACF,MAAM,CAAC,IACxB,CAACC,MAAM,CAACE,SAAS,CAACH,MAAM,CAAC,IACzBA,MAAM,GAAG,CAAC,IACVA,MAAM,GAAG,WAAW,EACpB;IACA,MAAM,IAAII,SAAS,CAAC,gBAAgB,CAAC;EACvC;EACA,MAAMC,OAAO,GAAGd,eAAe,CAACQ,MAAM,CAACO,WAAW,CAAC,CAAC,CAAC;EACrD,IAAID,OAAO,KAAKnB,SAAS,EAAE;IACzB,MAAM,IAAIkB,SAAS,CAAC,4BAA4BL,MAAM,EAAE,CAAC;EAC3D;EACA;EACA,IAAIC,MAAM,GAAG,GAAG,GAAGK,OAAO,EAAE;IAC1B,MAAM,IAAIE,UAAU,CAClB,eAAeP,MAAM,4BAA4B,GAC/C,kBAAkB,GAAG,GAAGK,OAAO,SAASN,MAAM,EAClD,CAAC;EACH;AACF;AAEA,OAAO,SAASS,IAAIA,CAClBT,MAAc,EACdU,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVX,MAAc,EACdf,QAAsB,EAChB;EACND,gBAAgB,CAACC,QAAQ,CAAC;EAE1B,IAAI;IACF,MAAM2B,gBAAgB,GAAGhC,iBAAiB,CAACmB,MAAM,CAAC;IAClD,MAAMc,YAAY,GAAGzB,aAAa,CAACqB,GAAG,EAAE,KAAK,CAAC;IAC9C,MAAMK,aAAa,GAAG1B,aAAa,CAACsB,IAAI,EAAE,MAAM,CAAC;IACjD,MAAMK,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;IAEjDb,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;IAE5C,MAAMgB,SAAS,GAAGlC,SAAS,CAAC,CAAC;IAC7BkC,SAAS,CACNC,SAAS,CACRL,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbf,MACF,CAAC,CACAkB,IAAI,CACHC,GAAG,IAAI;MACLlC,QAAQ,CAAC,IAAI,EAAER,MAAM,CAAC2C,IAAI,CAACD,GAAG,CAAC,CAAC;IAClC,CAAC,EACDE,GAAG,IAAI;MACLpC,QAAQ,CAACoC,GAAG,CAAC;IACf,CACF,CAAC;EACL,CAAC,CAAC,OAAOA,GAAG,EAAE;IACZpC,QAAQ,CAACoC,GAAY,CAAC;EACxB;AACF;AAEA,OAAO,SAASC,QAAQA,CACtBvB,MAAc,EACdU,GAAgB,EAChBC,IAAU,EACVC,IAAU,EACVX,MAAc,EACN;EACR,MAAMY,gBAAgB,GAAGhC,iBAAiB,CAACmB,MAAM,CAAC;EAClD,MAAMc,YAAY,GAAGzB,aAAa,CAACqB,GAAG,EAAE,KAAK,CAAC;EAC9C,MAAMK,aAAa,GAAG1B,aAAa,CAACsB,IAAI,EAAE,MAAM,CAAC;EACjD,MAAMK,aAAa,GAAG3B,aAAa,CAACuB,IAAI,EAAE,MAAM,CAAC;EAEjDb,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;EAE5C,MAAMgB,SAAS,GAAGlC,SAAS,CAAC,CAAC;EAC7B,MAAMyC,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCZ,gBAAgB,EAChBC,YAAY,EACZC,aAAa,EACbC,aAAa,EACbf,MACF,CAAC;EAED,OAAOvB,MAAM,CAAC2C,IAAI,CAACG,MAAM,CAAC;AAC5B;AAEA,OAAO,SAASE,cAAcA,CAC5BC,SAAwB,EACxBC,OAAkB,EAClBC,MAAc,EACD;EACb,MAAMC,IAAI,GAAGH,SAAS,CAACG,IAAI;EAC3B,MAAMnB,IAAI,GAAGgB,SAAS,CAAChB,IAAI;EAC3B,MAAMC,IAAI,GAAGe,SAAS,CAACf,IAAI;;EAE3B;EACA;EACA,MAAMmB,SAAS,GAAGH,OAAO,CAACI,SAAS,CAACC,MAAM,CAAC,CAAC;;EAE5C;EACA,MAAMhC,MAAM,GAAGiC,IAAI,CAACC,IAAI,CAACN,MAAM,GAAG,CAAC,CAAC;EAEpC,MAAMO,QAAQ,GAAG,OAAON,IAAI,KAAK,QAAQ,GAAGA,IAAI,GAAGA,IAAI,CAACvC,IAAI;EAC5D,MAAMsB,gBAAgB,GAAGhC,iBAAiB,CAACuD,QAAQ,CAAC;EAEpDrC,kBAAkB,CAACc,gBAAgB,EAAEZ,MAAM,CAAC;EAE5C,MAAMgB,SAAS,GAAGlC,SAAS,CAAC,CAAC;EAC7B,MAAMyC,MAAM,GAAGP,SAAS,CAACQ,aAAa,CACpCZ,gBAAgB,EAChBjC,uBAAuB,CAACmD,SAAS,CAAC,EAClCnD,uBAAuB,CAAC+B,IAAI,CAAC,EAC7B/B,uBAAuB,CAACgC,IAAI,CAAC,EAC7BX,MACF,CAAC;EAED,OAAOuB,MAAM;AACf","ignoreList":[]}

package/lib/module/hmac.js

@@ -63,14 +63,24 @@ class Hmac extends Stream.Transform {
     return Buffer.from(nativeDigest);
   }
 
-  // stream interface
+  // Stream interface — surface synchronous errors via the callback so
+  // they emit as stream 'error' events instead of throwing out of the
+  // Transform plumbing.
   _transform(chunk, encoding, callback) {
-    this.update(chunk, encoding);
-    callback();
+    try {
+      this.update(chunk, encoding);
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
   _flush(callback) {
-    this.push(this.digest());
-    callback();
+    try {
+      this.push(this.digest());
+      callback();
+    } catch (err) {
+      callback(err);
+    }
   }
 }
 

package/lib/module/hmac.js.map

@@ -1 +1 @@
-{"version":3,"names":["Buffer","Stream","NitroModules","ab2str","binaryLikeToArrayBuffer","Hmac","Transform","validate","args","algorithm","length","Error","key","undefined","constructor","options","native","createHybridObject","createHmac","update","data","inputEncoding","defaultEncoding","digest","encoding","nativeDigest","from","_transform","chunk","callback","_flush","push","hmacExports"],"sourceRoot":"../../src","sources":["hmac.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,MAAM,QAAQ,iBAAiB;AACxC,SAASC,YAAY,QAAQ,4BAA4B;AAIzD,SAASC,MAAM,EAAEC,uBAAuB,QAAQ,oBAAoB;AAQpE,MAAMC,IAAI,SAASJ,MAAM,CAACK,SAAS,CAAC;EAK1BC,QAAQA,CAACC,IAAc,EAAE;IAC/B,IAAI,OAAOA,IAAI,CAACC,SAAS,KAAK,QAAQ,IAAID,IAAI,CAACC,SAAS,CAACC,MAAM,KAAK,CAAC,EACnE,MAAM,IAAIC,KAAK,CAAC,sCAAsC,CAAC;IACzD,IAAIH,IAAI,CAACI,GAAG,KAAK,IAAI,IAAIJ,IAAI,CAACI,GAAG,KAAKC,SAAS,EAC7C,MAAM,IAAIF,KAAK,CAAC,mCAAmC,CAAC;EACxD;;EAEA;AACF;AACA;EACUG,WAAWA,CAACN,IAAc,EAAE;IAClC,KAAK,CAACA,IAAI,CAACO,OAAO,CAAC;IAEnB,IAAI,CAACR,QAAQ,CAACC,IAAI,CAAC;IAEnB,IAAI,CAACC,SAAS,GAAGD,IAAI,CAACC,SAAS;IAC/B,IAAI,CAACG,GAAG,GAAGJ,IAAI,CAACI,GAAG;IAEnB,IAAI,CAACI,MAAM,GAAGd,YAAY,CAACe,kBAAkB,CAAa,MAAM,CAAC;IACjE,IAAI,CAACD,MAAM,CAACE,UAAU,CAAC,IAAI,CAACT,SAAS,EAAEL,uBAAuB,CAAC,IAAI,CAACQ,GAAG,CAAC,CAAC;EAC3E;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEO,MAAMA,CAACC,IAAgB,EAAEC,aAAwB,EAAQ;IACvD,MAAMC,eAAyB,GAAG,MAAM;IACxCD,aAAa,GAAGA,aAAa,IAAIC,eAAe;;IAEhD;IACA,IAAI,OAAOF,IAAI,KAAK,QAAQ,IAAIC,aAAa,KAAK,MAAM,EAAE;MACxD,IAAI,CAACL,MAAM,CAACG,MAAM,CAACC,IAAI,CAAC;IAC1B,CAAC,MAAM;MACL,IAAI,CAACJ,MAAM,CAACG,MAAM,CAACf,uBAAuB,CAACgB,IAAI,EAAEC,aAAa,CAAC,CAAC;IAClE;IAEA,OAAO,IAAI,CAAC,CAAC;EACf;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEE,MAAMA,CAACC,QAAmB,EAAmB;IAC3C,MAAMC,YAAY,GAAG,IAAI,CAACT,MAAM,CAACO,MAAM,CAAC,CAAC;IAEzC,IAAIC,QAAQ,IAAIA,QAAQ,KAAK,QAAQ,EAAE;MACrC,OAAOrB,MAAM,CAACsB,YAAY,EAAED,QAAQ,CAAC;IACvC;IAEA,OAAOxB,MAAM,CAAC0B,IAAI,CAACD,YAAY,CAAC;EAClC;;EAEA;EACAE,UAAUA,CACRC,KAAiB,EACjBJ,QAAwB,EACxBK,QAAoB,EACpB;IACA,IAAI,CAACV,MAAM,CAACS,KAAK,EAAEJ,QAAoB,CAAC;IACxCK,QAAQ,CAAC,CAAC;EACZ;EACAC,MAAMA,CAACD,QAAoB,EAAE;IAC3B,IAAI,CAACE,IAAI,CAAC,IAAI,CAACR,MAAM,CAAC,CAAC,CAAC;IACxBM,QAAQ,CAAC,CAAC;EACZ;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASX,UAAUA,CACxBT,SAAiB,EACjBG,GAAe,EACfG,OAA0B,EACpB;EACN;EACA,OAAO,IAAIV,IAAI,CAAC;IACdI,SAAS;IACTG,GAAG;IACHG;EACF,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMiB,WAAW,GAAG;EACzBd;AACF,CAAC","ignoreList":[]}
+{"version":3,"names":["Buffer","Stream","NitroModules","ab2str","binaryLikeToArrayBuffer","Hmac","Transform","validate","args","algorithm","length","Error","key","undefined","constructor","options","native","createHybridObject","createHmac","update","data","inputEncoding","defaultEncoding","digest","encoding","nativeDigest","from","_transform","chunk","callback","err","_flush","push","hmacExports"],"sourceRoot":"../../src","sources":["hmac.ts"],"mappings":";;AAAA,SAASA,MAAM,QAAQ,gCAAgC;AACvD,SAASC,MAAM,QAAQ,iBAAiB;AACxC,SAASC,YAAY,QAAQ,4BAA4B;AAIzD,SAASC,MAAM,EAAEC,uBAAuB,QAAQ,oBAAoB;AAQpE,MAAMC,IAAI,SAASJ,MAAM,CAACK,SAAS,CAAC;EAK1BC,QAAQA,CAACC,IAAc,EAAE;IAC/B,IAAI,OAAOA,IAAI,CAACC,SAAS,KAAK,QAAQ,IAAID,IAAI,CAACC,SAAS,CAACC,MAAM,KAAK,CAAC,EACnE,MAAM,IAAIC,KAAK,CAAC,sCAAsC,CAAC;IACzD,IAAIH,IAAI,CAACI,GAAG,KAAK,IAAI,IAAIJ,IAAI,CAACI,GAAG,KAAKC,SAAS,EAC7C,MAAM,IAAIF,KAAK,CAAC,mCAAmC,CAAC;EACxD;;EAEA;AACF;AACA;EACUG,WAAWA,CAACN,IAAc,EAAE;IAClC,KAAK,CAACA,IAAI,CAACO,OAAO,CAAC;IAEnB,IAAI,CAACR,QAAQ,CAACC,IAAI,CAAC;IAEnB,IAAI,CAACC,SAAS,GAAGD,IAAI,CAACC,SAAS;IAC/B,IAAI,CAACG,GAAG,GAAGJ,IAAI,CAACI,GAAG;IAEnB,IAAI,CAACI,MAAM,GAAGd,YAAY,CAACe,kBAAkB,CAAa,MAAM,CAAC;IACjE,IAAI,CAACD,MAAM,CAACE,UAAU,CAAC,IAAI,CAACT,SAAS,EAAEL,uBAAuB,CAAC,IAAI,CAACQ,GAAG,CAAC,CAAC;EAC3E;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEO,MAAMA,CAACC,IAAgB,EAAEC,aAAwB,EAAQ;IACvD,MAAMC,eAAyB,GAAG,MAAM;IACxCD,aAAa,GAAGA,aAAa,IAAIC,eAAe;;IAEhD;IACA,IAAI,OAAOF,IAAI,KAAK,QAAQ,IAAIC,aAAa,KAAK,MAAM,EAAE;MACxD,IAAI,CAACL,MAAM,CAACG,MAAM,CAACC,IAAI,CAAC;IAC1B,CAAC,MAAM;MACL,IAAI,CAACJ,MAAM,CAACG,MAAM,CAACf,uBAAuB,CAACgB,IAAI,EAAEC,aAAa,CAAC,CAAC;IAClE;IAEA,OAAO,IAAI,CAAC,CAAC;EACf;;EAEA;AACF;AACA;AACA;AACA;AACA;AACA;AACA;AACA;;EAGEE,MAAMA,CAACC,QAAmB,EAAmB;IAC3C,MAAMC,YAAY,GAAG,IAAI,CAACT,MAAM,CAACO,MAAM,CAAC,CAAC;IAEzC,IAAIC,QAAQ,IAAIA,QAAQ,KAAK,QAAQ,EAAE;MACrC,OAAOrB,MAAM,CAACsB,YAAY,EAAED,QAAQ,CAAC;IACvC;IAEA,OAAOxB,MAAM,CAAC0B,IAAI,CAACD,YAAY,CAAC;EAClC;;EAEA;EACA;EACA;EACAE,UAAUA,CACRC,KAAiB,EACjBJ,QAAwB,EACxBK,QAAsC,EACtC;IACA,IAAI;MACF,IAAI,CAACV,MAAM,CAACS,KAAK,EAAEJ,QAAoB,CAAC;MACxCK,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZD,QAAQ,CAACC,GAAY,CAAC;IACxB;EACF;EACAC,MAAMA,CAACF,QAAsC,EAAE;IAC7C,IAAI;MACF,IAAI,CAACG,IAAI,CAAC,IAAI,CAACT,MAAM,CAAC,CAAC,CAAC;MACxBM,QAAQ,CAAC,CAAC;IACZ,CAAC,CAAC,OAAOC,GAAG,EAAE;MACZD,QAAQ,CAACC,GAAY,CAAC;IACxB;EACF;AACF;;AAEA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA;AACA,OAAO,SAASZ,UAAUA,CACxBT,SAAiB,EACjBG,GAAe,EACfG,OAA0B,EACpB;EACN;EACA,OAAO,IAAIV,IAAI,CAAC;IACdI,SAAS;IACTG,GAAG;IACHG;EACF,CAAC,CAAC;AACJ;AAEA,OAAO,MAAMkB,WAAW,GAAG;EACzBf;AACF,CAAC","ignoreList":[]}

package/lib/module/keys/publicCipher.js

@@ -79,8 +79,13 @@ export function publicDecrypt(key, buffer) {
   try {
     const decrypted = rsaCipher.publicDecrypt(keyHandle.handle, data, paddingMode);
     return Buffer.from(decrypted);
-  } catch (error) {
-    throw new Error(`publicDecrypt failed: ${error.message}`);
+  } catch {
+    // Bleichenbacher mitigation: surface a single, content-independent error
+    // for every decrypt failure so an attacker cannot use error-message
+    // differences as a padding oracle. The native side already collapses its
+    // OpenSSL error codes to the same opaque message; we drop it here too
+    // rather than re-leaking it via string interpolation.
+    throw new Error('publicDecrypt failed');
   }
 }
 function preparePrivateCipherKey(key, isEncrypt) {
@@ -151,8 +156,9 @@ export function privateDecrypt(key, buffer) {
   try {
     const decrypted = rsaCipher.privateDecrypt(keyHandle.handle, data, paddingMode, hashAlgorithm, oaepLabel);
     return Buffer.from(decrypted);
-  } catch (error) {
-    throw new Error(`privateDecrypt failed: ${error.message}`);
+  } catch {
+    // Bleichenbacher mitigation — see publicDecrypt above.
+    throw new Error('privateDecrypt failed');
   }
 }
 //# sourceMappingURL=publicCipher.js.map