Replace noble-ed25519 with tweetnacl

CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+### v0.28.1
+
+- Switch from noble-ed25519 to tweetnacl. Tweetnacl has been audited and can be used in a wider range of environments.
+
 ### v0.28.0
 
 - Added the `fs.addPublicExchangeKey()` function which adds the public exchange key of that domain/browser/device to your filesystem at `/public/.well-known/exchange/DID_KEY`. Along with the `fs.hasPublicExchangeKey()` to check if it's there.

package.json

@@ -1,6 +1,6 @@
 {
   "name": "webnative",
-  "version": "0.28.0",
+  "version": "0.28.1",
   "description": "Fission Webnative SDK",
   "keywords": [
     "WebCrypto",
@@ -99,8 +99,8 @@
     "keystore-idb": "0.15.0",
     "localforage": "^1.9.0",
     "multiformats": "^9.0.0",
-    "noble-ed25519": "^1.2.4",
     "throttle-debounce": "^3.0.1",
+    "tweetnacl": "^0.14.5",
     "uint8arrays": "^2.1.7"
   },
   "resolutions": {

src/common/version.ts

@@ -1 +1 @@
-export const VERSION = "0.28.0"
+export const VERSION = "0.28.1"

src/crypto/browser.ts

@@ -1,4 +1,4 @@
-import * as ed25519 from "noble-ed25519"
+import tweetnacl from "tweetnacl"
 import rsaOperations from "keystore-idb/rsa/index.js"
 import utils from "keystore-idb/utils.js"
 import aes from "keystore-idb/aes/index.js"
@@ -65,7 +65,7 @@ export const rsaVerify = (message: Uint8Array, signature: Uint8Array, publicKey:
 }
 
 export const ed25519Verify = (message: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): Promise<boolean> => {
-  return ed25519.verify(signature, message, publicKey)
+  return new Promise(resolve => resolve(tweetnacl.sign.detached.verify(message, signature, publicKey)))
 }
 
 export const ksPublicExchangeKey = async (): Promise<string> => {

src/setup/node.ts

@@ -1,5 +1,5 @@
 import crypto from "crypto"
-import * as ed25519 from "noble-ed25519"
+import tweetnacl from "tweetnacl"
 import utils from "keystore-idb/utils.js"
 import { CharSize, Config, CryptoSystem, KeyStore, KeyUse, Msg, PublicKey, SymmKeyLength } from "keystore-idb/types.js"
 import config from "keystore-idb/config.js"
@@ -75,7 +75,7 @@ const rsaVerify = (message: Uint8Array, signature: Uint8Array, publicKey: Uint8A
 }
 
 const ed25519Verify = (message: Uint8Array, signature: Uint8Array, publicKey: Uint8Array): Promise<boolean> => {
-  return ed25519.verify(signature, message, publicKey)
+  return new Promise(resolve => resolve(tweetnacl.sign.detached.verify(message, signature, publicKey)))
 }
 
 

tsconfig.json

@@ -1,7 +1,7 @@
 {
   "compilerOptions": {
     "moduleResolution": "node",
-    "target": "ES2020",
+    "target": "ES2018",
     "module":"ESNext",
     "lib": ["dom", "es2021"],
     "strict": true,