fix: wrong hash usage in sdk

scolastico · scolastico · commit aa3e2415f054 · 2025-10-05T09:37:38.000+02:00
diff --git a/src/lib/crypto.ts b/src/lib/crypto.ts
@@ -52,8 +52,7 @@ export async function checkIfValidSignature(cfg: WaluConfig, version: IVersionFi
     );
 
     const signatureBuffer = base64ToArrayBuffer(version.signature);
-    const calculatedHash = CryptoJS.SHA256(version.hash + version.version).toString();
-    const dataBuffer = new TextEncoder().encode(calculatedHash);
+    const dataBuffer = new TextEncoder().encode(version.hash);
     const isValid = await crypto.subtle.verify(
       {
         name: "RSASSA-PKCS1-v1_5",

Original file line number	Diff line number	Diff line change
`@@ -52,8 +52,7 @@ export async function checkIfValidSignature(cfg: WaluConfig, version: IVersionFi`
`52`	`52`	`);`
`53`	`53`
`54`	`54`	`const signatureBuffer = base64ToArrayBuffer(version.signature);`
`55`		`- const calculatedHash = CryptoJS.SHA256(version.hash + version.version).toString();`
`56`		`- const dataBuffer = new TextEncoder().encode(calculatedHash);`
	`55`	`+ const dataBuffer = new TextEncoder().encode(version.hash);`
`57`	`56`	`const isValid = await crypto.subtle.verify(`
`58`	`57`	`{`
`59`	`58`	`name: "RSASSA-PKCS1-v1_5",`