forge

forge copied to clipboard

forge.pkcs7.messageFromPem stop working since 1.3.0 version

7

I was using this function to decode a pem of pkcs#7, but from 1.3.0 version it's returning: Unparsed DER bytes remain after ASN.1 parsing. Best regards,

albertoinch

Test on Node.js 16.x and 18.x.

1

davidlehn

Any chance we could get some proxy re-encryption APIs ?

dimitrirostavo

I ran an experiment on `forge.pki.rsa.generateKeyPair` method with input `4096` bits and different seed A `a996dc4726424c0e368c898da1a77dba58596340ae3dd222f39ec4625eb1a960` and B `a9a6b63507dc2dedfac4afa8a2074c1d58fa97cc04901e9844ab937212567fa5` code example: https://replit.com/@YikFaiFai1/node-forge#index.js it turns out that both `p` and `q`...

fai516

This fixes https://github.com/digitalbazaar/forge/issues/971

mass85

Client upgrades to TLSv1.1 unexpectedly and sends plain text data

2

I'm implementing a system that uses forge for TLS as part of stack on top of Bluetooth. There are two parties of the communication: - TLS server - Forge used...

mass85

When TLS server receives ClientHello with version v1.1 (the default) it tries to determine which version it should use. Server does it incorrectly and always decides to use v1.0 although...

mass85

Greetings, My brain panics whenever seeing `SHA-1`, after doing some research appears SHA-1 is still considered secure for key derivation ([this site seeming the most reputable](https://csrc.nist.gov/Projects/Hash-Functions/NIST-Policy-on-Hash-Functions)). Just wanting to see...

WardPearce

Improper Verification of Cryptographic Signature in `node-forge`

1

RSA PKCS#1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed and garbage data...

HermesZum

fix: Replace deprecated String.prototype.substr()

1

[String.prototype.substr()](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/substr) is deprecated so we replace it with [String.prototype.slice()](https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/String/slice) which works similarily but isn't deprecated. .substr() probably isn't going away anytime soon but the change is trivial so it doesn't...

CommanderRoot