v0.10.0 - New signature API
-
Signature API breaking change!
nacl.signandnacl.sign.opennow deal
with signed messages, and newnacl.sign.detachedand
nacl.sign.detached.verifyare available.Previously,
nacl.signreturned a signature, andnacl.sign.openaccepted a
message and "detached" signature. This was unlike NaCl's API, which dealt with
signed messages (concatenation of signature and message).The new API is:
nacl.sign(message, secretKey) -> signedMessage nacl.sign.open(signedMessage, publicKey) -> message | nullSince detached signatures are common, two new API functions were introduced:
nacl.sign.detached(message, secretKey) -> signature nacl.sign.detached.verify(message, signature, publicKey) -> true | false(Note that it's
verify, notopen, and it returns a boolean value, unlike
open, which returns an "unsigned" message.) -
NPM package now comes without
testdirectory to keep it small.