Skip to content

feat(argon2): vendor hash-wasm v4.12.0 as @bitgo/argon2#8482

Open
pranavjain97 wants to merge 1 commit intomasterfrom
WCN-29-vendor-hash-wasm
Open

feat(argon2): vendor hash-wasm v4.12.0 as @bitgo/argon2#8482
pranavjain97 wants to merge 1 commit intomasterfrom
WCN-29-vendor-hash-wasm

Conversation

@pranavjain97
Copy link
Copy Markdown
Contributor

Vendor the argon2 subset of hash-wasm as a new @bitgo/argon2 module, following the same pattern as @bitgo/sjcl. The pre-built UMD bundle (~29KB) contains argon2 and blake2b WASM binaries embedded as base64 with zero runtime dependencies.

Exports: argon2id, argon2i, argon2d, argon2Verify with full TypeScript type definitions. Includes verify-vendor.sh script for reproducible re-vendoring from npm.

This module is a prerequisite for migrating BitGoJS encryption from SJCL (PBKDF2-SHA256 @ 10k iterations, ~1ms per guess on modern hardware) to Argon2id, which is memory-hard and GPU-resistant.

TICKET: WCN-29

@linear
Copy link
Copy Markdown

linear bot commented Apr 10, 2026

@pranavjain97 pranavjain97 force-pushed the WCN-29-vendor-hash-wasm branch from f1d0990 to 221ebac Compare April 10, 2026 16:42
Vendor the argon2 subset of hash-wasm as a new @bitgo/argon2 module,
following the same pattern as @bitgo/sjcl. The pre-built UMD bundle
(~29KB) contains argon2 and blake2b WASM binaries embedded as base64
with zero runtime dependencies.

Exports: argon2id, argon2i, argon2d, argon2Verify with full TypeScript
type definitions. Includes verify-vendor.sh script for reproducible
re-vendoring from npm.

WCN-29

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

TICKET: WCN-29
@pranavjain97 pranavjain97 force-pushed the WCN-29-vendor-hash-wasm branch from 221ebac to 671b89c Compare April 10, 2026 17:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant