@noble/hashes

Security and correctness

• security

  Protect passed options against mutation / pollution

• security

  keccakprg: fail until entropy is added

• security

  webcrypto: reject output sizes which crashed engine

• security

  blake3: fix tree merging for multi-terabyte streams

• security

  Improve zeroization

Misc

• Speed-up Argon2 by 20%

• Argon2 cost options are now optional. The defaults are t: 3, m: 1024 ** 2 KiB (1 GiB), p: 1, dkLen: 32, and a 1 GiB maxmem limit; larger-memory calls must set maxmem explicitly.

• Corrected scrypt's default maxmem to work for N: 2 ** 20, r: 8, and p: 1

• nextTick and asyncLoop now yield through scheduler.yield() when available or setTimeout otherwise, allowing timers, I/O, and rendering to progress. They also accept optional rejection cleanup; async Argon2, PBKDF2, and scrypt use it to wipe work state if scheduling is aborted.

Improve speed:

• +10-45% 32b inputs across all hashes

• +40% SHA-3 / SHAKE, +50% 1mb KT128 / KT256 / TurboSHAKE, +20% kmac

• 2.2x argon

• +20% pbkdf2 and hkdf

Other changes:

• Better error messages and stricter type checks everywhere

• Bugfix: HMAC _cloneInto now preserves canXOF (#134, ChALkeR); Argon2d typo rename (#135).

• blake2.compress renamed to _compress (marked internal).

• Reduce on-disk unpacked size 869kb → 665kb (-204kb) by disabling source maps (they became less relevant).