Skip to content

Conversation

@45930
Copy link
Collaborator

@45930 45930 commented Oct 9, 2025

js-sha256 edits the prototype, and Lumina noticed that sporadically, they got an error where this behavior is the primary suspect: https://github.com/emn178/js-sha256/blob/bacba8e8c6d6a79a6505ba52edbad55ec5509b19/src/sha256.js#L394

Modifying the prototype can be blocked in certain runtimes and bundlers that freeze objects by default, but since it doesn't happen every time, it's hard to pinpoint the exact issue.

I'd like to package this PR as a branch release and provide it to the Lumina team to test with.

@45930 45930 force-pushed the 2025-10-rm-js-sha256 branch from b82f48e to 7c866d1 Compare October 10, 2025 14:29
@45930 45930 marked this pull request as ready for review October 10, 2025 19:59
@45930 45930 requested review from a team as code owners October 10, 2025 19:59
@45930 45930 requested review from 0x471 and bleepbloopsify October 10, 2025 19:59
Copy link
Contributor

@bleepbloopsify bleepbloopsify left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks fine to me

Question: do we need to include the audit for the crypto libraries we use?

Copy link

@0x471 0x471 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

@45930 45930 added the pkg-pr-release Creates a release using pkg.pr.new label Oct 11, 2025
@pkg-pr-new
Copy link

pkg-pr-new bot commented Oct 11, 2025

Open in StackBlitz

npm i https://pkg.pr.new/o1-labs/o1js@2539
npm i https://pkg.pr.new/o1-labs/o1js/mina-signer@2539

commit: f25d24f

}

function computeChecksum(input: number[] | Uint8Array) {
let inputBytes = input instanceof Uint8Array ? input : new Uint8Array(input);
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

nit: let inputBytes = new Uint8Array(input); should be enough

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pkg-pr-release Creates a release using pkg.pr.new

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants