{"payload":{"feedbackUrl":"https://github.com/orgs/community/discussions/53140","repo":{"id":65900691,"defaultBranch":"main","name":"openpgpjs","ownerLogin":"ProtonMail","currentUserCanPush":false,"isFork":true,"isEmpty":false,"createdAt":"2016-08-17T11:01:47.000Z","ownerAvatar":"https://avatars.githubusercontent.com/u/6953970?v=4","public":true,"private":false,"isOrgOwned":true},"refInfo":{"name":"","listCacheKey":"v0:1720192330.0","currentOid":""},"activityList":{"items":[{"before":"d23eff7c08d17d4d5d2ac7f41baad132d3fe0c53","after":"7f396a52ef4ada22e8935fbfce67dcfedc5c3496","ref":"refs/heads/v6","pushedAt":"2024-07-05T15:05:24.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Use noble-ed25519 over tweetnacl for signature verification (#16)\n\nMuch faster than tweetnacl, and no constant-timeness required.\r\n\r\nWe are not using v2 for now, despite being smaller, because it relies on\r\nbigint literals, and it requires polyfilling the WebCrypto lib\r\nmanually in Node < 19.","shortMessageHtmlLink":"Use noble-ed25519 over tweetnacl for signature verification (#16)"}},{"before":"3fb90cb39a3f1a013e044c2317ef0a50d15eae46","after":"3059132c97dacef0ffa2ca84af02621d85fcac74","ref":"refs/heads/pqc-dsa","pushedAt":"2024-07-04T15:54:12.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"wip validation","shortMessageHtmlLink":"wip validation"}},{"before":"b7389335d1480a4586f9bd82f4ab8a00fc91f3ba","after":"3fb90cb39a3f1a013e044c2317ef0a50d15eae46","ref":"refs/heads/pqc-dsa","pushedAt":"2024-07-04T14:45:56.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Switch to noble-post-quantum for ML-DSA","shortMessageHtmlLink":"Switch to noble-post-quantum for ML-DSA"}},{"before":"c704397e29e7ae3b4295bf29768dbe5168622ac3","after":null,"ref":"refs/heads/v6-fix-ecdh-fingerprint-size","pushedAt":"2024-07-01T17:06:59.000Z","pushType":"branch_deletion","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"}},{"before":null,"after":"c704397e29e7ae3b4295bf29768dbe5168622ac3","ref":"refs/heads/v6-fix-ecdh-fingerprint-size","pushedAt":"2024-07-01T15:54:02.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Fix ECDH fingerprint size of v6 keys\n\nFingerprint should not be truncated, unlike for v4 and v5 keys","shortMessageHtmlLink":"Fix ECDH fingerprint size of v6 keys"}},{"before":"0a72a7d60bbf196e5c0affcdb6c7d7997c3d35da","after":"0ef51065166b63617f2bdfc3f54f2c1a6a4b9064","ref":"refs/heads/pqc","pushedAt":"2024-06-28T15:08:02.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add PQC KEM key validation","shortMessageHtmlLink":"Add PQC KEM key validation"}},{"before":"865987def0f6e1416f767e0885654ece54ccde96","after":"0a72a7d60bbf196e5c0affcdb6c7d7997c3d35da","ref":"refs/heads/pqc","pushedAt":"2024-06-27T15:24:42.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add PQC KEM key validation","shortMessageHtmlLink":"Add PQC KEM key validation"}},{"before":"7ab99502a9843de18623cb22f20612670a207773","after":"865987def0f6e1416f767e0885654ece54ccde96","ref":"refs/heads/pqc","pushedAt":"2024-06-27T12:13:53.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add PQC KEM key validation","shortMessageHtmlLink":"Add PQC KEM key validation"}},{"before":"4364eaef96b5ec89cbf8e73994eab08d8a45fcad","after":"d23eff7c08d17d4d5d2ac7f41baad132d3fe0c53","ref":"refs/heads/v6","pushedAt":"2024-06-26T12:04:11.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Use noble-ed25519 over tweetnacl for signature verification (#16)\n\nMuch faster than tweetnacl, and no constant-timeness required.\r\n\r\nWe are not using v2 for now, despite being smaller, because it relies on\r\nbigint literals, and it requires polyfilling the WebCrypto lib\r\nmanually in Node < 19.","shortMessageHtmlLink":"Use noble-ed25519 over tweetnacl for signature verification (#16)"}},{"before":"ddb87a4e4a166edf0895729ce2789443cce74cbb","after":"4364eaef96b5ec89cbf8e73994eab08d8a45fcad","ref":"refs/heads/v6","pushedAt":"2024-05-17T14:02:34.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Temporarily add `config.ignoreSEIPDv2FeatureFlag` for compatibility (#15)\n\nSEIPDv2 is a more secure and faster choice, but it is\r\nnot necessarily compatible with other libs and our mobile apps.\r\n\r\nCo-authored-by: Daniel Huigens ","shortMessageHtmlLink":"Temporarily add config.ignoreSEIPDv2FeatureFlag for compatibility (#15"}},{"before":"11ed199a5b2283460f25877477a9da6fee5b2ae9","after":"ddb87a4e4a166edf0895729ce2789443cce74cbb","ref":"refs/heads/v6","pushedAt":"2024-05-17T13:50:04.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Temporarily add `config.ignoreSEIPDv2FeatureFlag` for compatibility (#15)\n\nSEIPDv2 is a more secure and faster choice, but it is\r\nnot necessarily compatible with other libs and our mobile apps.\r\n\r\nCo-authored-by: Daniel Huigens ","shortMessageHtmlLink":"Temporarily add config.ignoreSEIPDv2FeatureFlag for compatibility (#15"}},{"before":"0f45d53e0ef548893a39ec042dfab1c48edee4c6","after":"11ed199a5b2283460f25877477a9da6fee5b2ae9","ref":"refs/heads/v6","pushedAt":"2024-04-19T15:24:17.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"6.0.0-beta.0.patch.0","shortMessageHtmlLink":"6.0.0-beta.0.patch.0"}},{"before":"360389ec80410793dce33764385163aa7be8ff9c","after":"0f45d53e0ef548893a39ec042dfab1c48edee4c6","ref":"refs/heads/v6","pushedAt":"2024-04-19T14:49:03.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Temporarily add `config.ignoreSEIPDv2FeatureFlag` for compatibility (#15)\n\nSEIPDv2 is a more secure and faster choice, but it is\r\nnot necessarily compatible with other libs and our mobile apps.\r\n\r\nCo-authored-by: Daniel Huigens ","shortMessageHtmlLink":"Temporarily add config.ignoreSEIPDv2FeatureFlag for compatibility (#15"}},{"before":"fc2bfede35380157879cd0178e1b0469b5933c2b","after":"360389ec80410793dce33764385163aa7be8ff9c","ref":"refs/heads/v6","pushedAt":"2024-04-19T14:10:04.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Temporarily add `config.ignoreSEIPDv2FeatureFlag` for compatibility (#15)\n\nSEIPDv2 is a more secure and faster choice, but it is\r\nnot necessarily compatible with other libs and our mobile apps.\r\n\r\nCo-authored-by: Daniel Huigens ","shortMessageHtmlLink":"Temporarily add config.ignoreSEIPDv2FeatureFlag for compatibility (#15"}},{"before":"4694d774c9a6916c04a20f3ba1bc2808c83513ed","after":"fc2bfede35380157879cd0178e1b0469b5933c2b","ref":"refs/heads/v6","pushedAt":"2024-04-19T14:09:11.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Update package name in benchmark tests","shortMessageHtmlLink":"Update package name in benchmark tests"}},{"before":"2b3e3aec58b8b3017f14b68364ec431e6996f810","after":"4694d774c9a6916c04a20f3ba1bc2808c83513ed","ref":"refs/heads/v6","pushedAt":"2024-04-17T15:39:57.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"CI: temporarily enable on push for Protonmail/v6 branch","shortMessageHtmlLink":"CI: temporarily enable on push for Protonmail/v6 branch"}},{"before":"b4b86023ba93047a6dc43cf0121bc62a3b99d6d0","after":"2b3e3aec58b8b3017f14b68364ec431e6996f810","ref":"refs/heads/v6","pushedAt":"2024-04-16T13:05:41.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"CI: temporarily enable on push for Protonmail/v6 branch","shortMessageHtmlLink":"CI: temporarily enable on push for Protonmail/v6 branch"}},{"before":"0c70aa628bdeeda952a5dbcea97b463d56a49bc2","after":"e8f33f3b7e56778ece41f0855e9545ae84dab100","ref":"refs/heads/main","pushedAt":"2024-04-12T08:25:57.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"5.11.2-0","shortMessageHtmlLink":"5.11.2-0"}},{"before":"ad4d58036d82697465d425bc4eec4a776375e353","after":"0c70aa628bdeeda952a5dbcea97b463d56a49bc2","ref":"refs/heads/main","pushedAt":"2024-04-12T08:13:36.000Z","pushType":"pr_merge","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add `Argon2S2K.reloadWasmModule()` for manually triggering memory deallocation (#14)\n\nAlso, make `ARGON2_WASM_MEMORY_THRESHOLD_RELOAD`\r\na static class property, to be able to change its value.","shortMessageHtmlLink":"Add Argon2S2K.reloadWasmModule() for manually triggering memory dea…"}},{"before":"0eb083935a691c60a9b6967e632c93d7dd53a112","after":"ad4d58036d82697465d425bc4eec4a776375e353","ref":"refs/heads/main","pushedAt":"2024-04-10T14:28:52.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Export Argon2S2K to reuse the WASM module outside of the OpenPGP.js context (#12)","shortMessageHtmlLink":"Export Argon2S2K to reuse the WASM module outside of the OpenPGP.js c…"}},{"before":null,"after":"b7389335d1480a4586f9bd82f4ab8a00fc91f3ba","ref":"refs/heads/pqc-dsa","pushedAt":"2024-03-18T11:47:42.000Z","pushType":"branch_creation","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Minor fixes","shortMessageHtmlLink":"Minor fixes"}},{"before":"cdb7f484deb573d40d1859d5865136aeb6c8a2a3","after":"7ab99502a9843de18623cb22f20612670a207773","ref":"refs/heads/pqc","pushedAt":"2024-03-18T10:22:37.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add PQC KEM key validation","shortMessageHtmlLink":"Add PQC KEM key validation"}},{"before":"88c121af9d67984f6c286e11e2a8eb45aefc21e4","after":"cdb7f484deb573d40d1859d5865136aeb6c8a2a3","ref":"refs/heads/pqc","pushedAt":"2024-03-18T10:21:32.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Point to `@openpgp/crystals-kyber-js`","shortMessageHtmlLink":"Point to @openpgp/crystals-kyber-js"}},{"before":"c0e8bed67112cd199c0e148e3888da5780c8943f","after":"b4b86023ba93047a6dc43cf0121bc62a3b99d6d0","ref":"refs/heads/v6","pushedAt":"2024-03-11T11:55:52.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"6.0.0-alpha.1.patch.1","shortMessageHtmlLink":"6.0.0-alpha.1.patch.1"}},{"before":"df6b554414a5956a6c80ceeb622c9bb2bc662612","after":"c0e8bed67112cd199c0e148e3888da5780c8943f","ref":"refs/heads/v6","pushedAt":"2024-03-11T10:41:34.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Temporary workaround for Babel issue affecting web-app tests\n\nThe Babel plugin `@babel/plugin-transform-regenerator` used in the web-app Jest tests\n(as part of @babel/preset-env) introduces a bug when transforming this specific minified\nlightweight built.\nThe issue is that the mangled `ArrayStream` class name (`n` in the specific case) gets wrongly\nreused and shadowed by a local variable in the `readPacket` function.\nAs a workaround for the problem, and to not have to amend the babel config for each monorepo workspace,\nwe disable mangling the specific class name.","shortMessageHtmlLink":"Temporary workaround for Babel issue affecting web-app tests"}},{"before":"e73017f91ba31bd22a0963f3d4c8fa88b30ba434","after":"df6b554414a5956a6c80ceeb622c9bb2bc662612","ref":"refs/heads/v6","pushedAt":"2024-03-01T14:09:25.000Z","pushType":"push","commitsCount":1,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"6.0.0-alpha.1.patch.0","shortMessageHtmlLink":"6.0.0-alpha.1.patch.0"}},{"before":"c0de6f773f02c198dab59d5976d34c54a1b7dc51","after":"e73017f91ba31bd22a0963f3d4c8fa88b30ba434","ref":"refs/heads/v6","pushedAt":"2024-03-01T13:17:22.000Z","pushType":"push","commitsCount":2,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Only add SHA3 preferences to v6 keys\n\nTo ensure compatibility with older mobile clients, which may not\nsupport verifying SHA3 message signatures","shortMessageHtmlLink":"Only add SHA3 preferences to v6 keys"}},{"before":"3d64539d2eb4003b614b15ace9fe0778143dae94","after":"c0de6f773f02c198dab59d5976d34c54a1b7dc51","ref":"refs/heads/v6","pushedAt":"2024-03-01T10:28:35.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add Ed25519 signature verification step to detect and avoid outputting faulty signatures (#11)\n\nEdDSA is known to be vulnerable to fault attacks which can lead to secret key extraction if\ntwo signatures over the same data can be collected.\nRandomly occurring bitflips in specific parts of the computation might in principle result\nin vulnerable faulty signatures being generated, hence we add the option to verify the signatures\nbefore outputting them.\n\nThis commit also adds the `checkEdDSAFaultySignatures` flag to the global config\nto be able to control the deployment of the eddsa check.\nSupport is limited to the global config object as the affected functions\ncurrently don't take a config input, and we don't need to selectively enable\nthe option anyway, so we limit the scope of the changes.","shortMessageHtmlLink":"Add Ed25519 signature verification step to detect and avoid outputtin…"}},{"before":"87bfc0572eddfb0da031ded15277d9e41e46550c","after":"3d64539d2eb4003b614b15ace9fe0778143dae94","ref":"refs/heads/v6","pushedAt":"2024-03-01T10:19:26.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Add Ed25519 signature verification step to detect and avoid outputting faulty signatures (#11)\n\nEdDSA is known to be vulnerable to fault attacks which can lead to secret key extraction if\ntwo signatures over the same data can be collected.\nRandomly occurring bitflips in specific parts of the computation might in principle result\nin vulnerable faulty signatures being generated, hence we add the option to verify the signatures\nbefore outputting them.\n\nThis commit also adds the `checkEdDSAFaultySignatures` flag to the global config\nto be able to control the deployment of the eddsa check.\nSupport is limited to the global config object as the affected functions\ncurrently don't take a config input, and we don't need to selectively enable\nthe option anyway, so we limit the scope of the changes.","shortMessageHtmlLink":"Add Ed25519 signature verification step to detect and avoid outputtin…"}},{"before":"a5e646243b93a8ecffee30d7e586cfe50c73abe5","after":"88c121af9d67984f6c286e11e2a8eb45aefc21e4","ref":"refs/heads/pqc","pushedAt":"2024-02-27T13:14:18.000Z","pushType":"force_push","commitsCount":0,"pusher":{"login":"larabr","name":null,"path":"/larabr","primaryAvatarUrl":"https://avatars.githubusercontent.com/u/7375870?s=80&v=4"},"commit":{"message":"Use ML-KEM instead of Kyber, implement message decryption","shortMessageHtmlLink":"Use ML-KEM instead of Kyber, implement message decryption"}}],"hasNextPage":true,"hasPreviousPage":false,"activityType":"all","actor":null,"timePeriod":"all","sort":"DESC","perPage":30,"cursor":"djE6ks8AAAAEd-jJrQA","startCursor":null,"endCursor":null}},"title":"Activity · ProtonMail/openpgpjs"}