·
4 commits
to main
since this release
Immutable
release. Only release title and notes can be modified.
Hardening
- AEAD strictness: passing AAD to a cipher that doesn't support it now throws AAD not supported instead of silently ignoring it. Applies to both native ciphers and the webcrypto wrappers via a new withAAD cipher param.
- CBC/ECB padding failures now surface as a generic aes: bad decrypt instead of a padding-specific message, reducing padding-oracle signal.
- FF1: minLen now enforces the NIST SP 800-38G minimum of 2 in addition to radix**minlen >= 100; stricter radix encoding guards.
- Correctness fixes for big-endian CPUs (polyval tag normalization, AES CTR partial-block tails).
- Other minor corrections
- Reduce on-disk package size: 710kb → 531kb (-179kb), by disabling source maps (they became less relevant).
Boost AES-SIV speed by 20%
Full Changelog: 2.2.0...2.3.0