Skip to content

Improved Password Storage

Compare
Choose a tag to compare
@CMEONE CMEONE released this 14 Jun 04:19
· 46 commits to master since this release

In this release, we improved the password storage in key objects to be stored as a packed Uint8Array for longer-term storage in memory. The password Uint8Array is zeroed out along with the key when the destroy method is called. Additionally, we exposed the util.compareConstant method, which compares strings and arrays for equality using operations that are closer to constant-time.