js-ethereum-cryptography

Update dependencies:

• curves to 1.2.0: https://github.com/paulmillr/noble-curves/releases/tag/1.2.0
• hashes to 1.3.2: https://github.com/paulmillr/noble-hashes/releases/tag/1.3.2
• bip32 to 1.3.2: https://github.com/paulmillr/scure-bip32/releases/tag/1.3.2

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/2.1.2...2.1.3

What's Changed

• Fix ESM/cjs import of bip39 in https://github.com/ethereum/js-ethereum-cryptography/pull/89

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/2.1.1...2.1.2

What's Changed

• Rewrite imports: add .js extension, gh-86 in https://github.com/ethereum/js-ethereum-cryptography/pull/87

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/2.1.0...2.1.1

What's Changed

• Add hybrid common.js - ESM support. Bump deps. Closes #79, #80, #14 by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/81
• Bump @scure/bip32 by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/85

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/2.0.0...2.1.0

Switched noble-secp256k1 to more secure noble-curves, which changes re-exported api of secp256k1 submodule.
Please refer to upgrading section from curves README.

This release bumps minimum node.js requirement to v16.

https://github.com/ethereum/js-ethereum-cryptography/pull/74

New Contributors

• @omahs made their first contribution in https://github.com/ethereum/js-ethereum-cryptography/pull/73

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/1.2.0...2.0.0

• AES bugfixes
• Expose scrypt onProgress callback
• Bump dependencies

New Contributors

• @1997roylee made their first contribution in https://github.com/ethereum/js-ethereum-cryptography/pull/53

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/1.1.2...1.2.0

What's Changed

• Bump noble-secp to 1.6.3, update all devDependencies by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/50

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/1.1.1...1.1.2

What's Changed

• Bump noble versions by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/48

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/1.1.0...1.1.1

What's Changed

• Upgrade dependencies with ESM support
• Expose keccak256.create in https://github.com/ethereum/js-ethereum-cryptography/pull/41
• Small refactor in https://github.com/ethereum/js-ethereum-cryptography/pull/46

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v1.0.2...1.1.0

What's Changed

• Bump noble-secp by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/36

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v1.0.2...v1.0.3

What's Changed

• Export recoverPublicKey from secp256k1. by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/35

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v1.0.1...v1.0.2

What's Changed

• Bump @noble/secp256k1 from 1.5.2 to 1.5.3 by @dependabot in https://github.com/ethereum/js-ethereum-cryptography/pull/34

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v1.0.0...v1.0.1

This is the final release of the new version of this library, written by @paulmillr.

It's a complete rewrite that leads to a 15x smaller, more secure, and portable version of the library.

For more info, take a look at this article.

What's Changed

• Re-use noble-hashes crypto module by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/18
• Fix tests by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/21
• Audit by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/22

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v0.2.4...v1.0.0-rc1

This release contains the final changes that were motivated by the soon-to-be-published security audit.

What's Changed

• Re-use noble-hashes crypto module by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/18
• Fix tests by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/21

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v0.2.4...v0.2.5

This release addresses some minor issues found during the audit. For more details go to #19.

This is a small release that improves the hdkey module. It makes its API more robust and ensures that the private key is properly dropped.

It also reuses the assertBytes utility from @noble/hashes to avoid duplication.

A small release in preparation for a security audit.

The only significant change it includes is an upgrade to @noble/hashes.

This is a small update that just replaces noble-* dependencies with their new @noble/* versions.

We just released a new version of the package, which has been rewritten using newer dependencies for all the cryptographic primitives.

The main difference is that the new dependencies are written in TypeScript, targeting more modern systems (i.e. using native bigint), and portable (i.e. not using Node.js APIs). This changes lead to a much smaller library, with less dependencies (which means more secure), and easier to use in the web.

Please, take a look at the README to learn how to upgrade, wand what you should do if you need to target older systems.

Huge thanks to @paulmillr who not only made this rewrite, but also implemented all the cryptographic primitives, and is coordinating the audit.

Security considerations

This version hasn't been audited yet. An audit will be conducted before the end of the year, but consider this experimental for now.

Once the project has been audited, we'll release v1.0.0.

What's Changed

• Rewrite the package. Use 3 deps instead of 39+ by @paulmillr in https://github.com/ethereum/js-ethereum-cryptography/pull/6

New Contributors

• @paulmillr made their first contribution in https://github.com/ethereum/js-ethereum-cryptography/pull/6

Full Changelog: https://github.com/ethereum/js-ethereum-cryptography/compare/v0.1.3...v0.2.0