fix(eddsa-poseidon): adds a check on the message parameter to ensure …

…it doesnt exceed 32 bytes.

re #190

packages/eddsa-poseidon/src/utils.ts

@@ -59,18 +59,21 @@ export function checkPrivateKey(privateKey: Buffer | Uint8Array | string): Buffe
 }
 
 /**
- * Validates and converts a BigNumberish message to a bigint.
+ * Validates and converts a BigNumberish message to a bigint. Ensures the message size does not exceed 32 bytes.
  * @param message The message to check and convert.
  * @returns The message as a bigint.
  */
 export function checkMessage(message: BigNumberish): bigint {
     requireTypes(message, "message", ["bignumberish", "string"])
 
-    if (isBigNumberish(message)) {
-        return bigNumberishToBigInt(message)
-    }
+    const bigIntMessage =
+        isBigNumberish(message) && message
+            ? bigNumberishToBigInt(message)
+            : bufferToBigInt(Buffer.from(message as string))
 
-    return bufferToBigInt(Buffer.from(message as string))
+    const maxLength = 2n ** 256n / 2n - 1n
+    if (bigIntMessage > maxLength) throw new Error(`Message length is larger than 32 bytes`)
+    return bigIntMessage
 }
 
 /**

packages/eddsa-poseidon/tests/eddsa-poseidon-blake1.test.ts

@@ -138,6 +138,22 @@ describe("EdDSAPoseidon", () => {
         expect(fun).toThrow(`Parameter 'message' is none of the following types: bignumberish, string`)
     })
 
+    it("Should throw an error if the message is larger than 32 Bytes [string]", async () => {
+        const message = "abcdefghijklmnopqrstuvwxyz1234567"
+
+        const fun = () => signMessage(privateKey, message)
+
+        expect(fun).toThrow(`Message length is larger than 32 bytes`)
+    })
+
+    it("Should throw an error if the message is larger than 32 Bytes [number]", async () => {
+        const message = 2 ** 256 / 2
+
+        const fun = () => signMessage(privateKey, message)
+
+        expect(fun).toThrow(`Message length is larger than 32 bytes`)
+    })
+
     it("Should verify a signature (numeric)", async () => {
         const publicKey = derivePublicKey(privateKey)
         const signature = signMessage(privateKey, message)