use native BigInt instead of the big-integer library#385

Merged

mariuz merged 23 commits into

masterfrom

native_BigInt

May 3, 2026

Commits on Feb 18, 2026

use native BigInt instead of the big-integer library
mariuz
committed
Explicitly convert A, B, and private keys (a/b) to BigInt at the entry points (clientProof and serverSession
mariuz
committed
Restore robustness (preventing the crash), we need to explicitly handle number inputs in toBigInt.
mariuz
committed
Detect Float-like Strings and safe conversions
mariuz
committed
Fix serverSession: Updated to calculate x (user hash) and apply the (u * x) % PRIME.N reduction, ensuring it matches the logic in clientSession and the Firebird engine.
mariuz
committed
use fixed Server key for tests
mariuz
committed
Modify serverSession to accept an optional a parameter. If provided, it calculates the session secret using the reduced exponent logic
mariuz
committed
compare it to cpp implementation
mariuz
committed
serverSession must be updated to match the client's behavior by explicitly calculating x and applying the modulo reduction to the exponent
mariuz
committed
add debug true for srp
mariuz
committed
modify toBigInt to only treat strings as floating-point numbers if they contain a decimal point . or if they are NOT valid hexadecimal strings.
mariuz
committed
Added a timeout to the SRP attachment test to prevent it from hanging indefinitely if authentication stalls. add math formulas to the debug logs , remove big-integer that caused the issue where bi…
mariuz
committed
debug srp false
mariuz
committed
remove big-integer from packages.json
mariuz
committed
While a (private key) is typically small (32 bytes) compared to N (128 bytes), making overflow unlikely, applying the modulo ensures consistency with the Firebird implementation and other clients.
mariuz
committed
enable SRP256 test , use the specified hash algorithm (SHA-256 for Srp256) when generating the session key K, instead of hardcoding sha1. This ensures compatibility with Firebird's Srp256 implement…
mariuz
committed
enable SRP256 in FIREBIRD_CONF_AuthServer , also fixes test that indicates that the Firebird server running in the CI environment is not configured to support the Srp256 authentication plugin (it l…
mariuz
committed
fix hardcoded algo
mariuz
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

use native BigInt instead of the big-integer library#385

use native BigInt instead of the big-integer library#385
mariuz merged 23 commits into
masterfrom
native_BigInt

Commits on Feb 18, 2026

use native BigInt instead of the big-integer library

Explicitly convert A, B, and private keys (a/b) to BigInt at the entry points (clientProof and serverSession

Restore robustness (preventing the crash), we need to explicitly handle number inputs in toBigInt.

Detect Float-like Strings and safe conversions

Fix serverSession: Updated to calculate x (user hash) and apply the (u * x) % PRIME.N reduction, ensuring it matches the logic in clientSession and the Firebird engine.

use fixed Server key for tests

Modify serverSession to accept an optional a parameter. If provided, it calculates the session secret using the reduced exponent logic

compare it to cpp implementation

serverSession must be updated to match the client's behavior by explicitly calculating x and applying the modulo reduction to the exponent

add debug true for srp

modify toBigInt to only treat strings as floating-point numbers if they contain a decimal point . or if they are NOT valid hexadecimal strings.

Added a timeout to the SRP attachment test to prevent it from hanging indefinitely if authentication stalls. add math formulas to the debug logs , remove big-integer that caused the issue where bi…

debug srp false

remove big-integer from packages.json

While a (private key) is typically small (32 bytes) compared to N (128 bytes), making overflow unlikely, applying the modulo ensures consistency with the Firebird implementation and other clients.

enable SRP256 test , use the specified hash algorithm (SHA-256 for Srp256) when generating the session key K, instead of hardcoding sha1. This ensures compatibility with Firebird's Srp256 implement…

enable SRP256 in FIREBIRD_CONF_AuthServer , also fixes test that indicates that the Firebird server running in the CI environment is not configured to support the Srp256 authentication plugin (it l…

fix hardcoded algo

Commits on Apr 13, 2026

Merge master into native_BigInt; minimize SRP changes to only replace big-integer with native BigInt

Use FIREBIRD_CONF_AuthServer=Legacy_Auth;Srp;Win_Sspi to match master CI config

Commits on May 3, 2026

Merge branch 'master' into native_BigInt

Add BIGINT_MIGRATION.md docs and expand test/srp.js from 4 to 19 tests

fix: replace flaky random-key SRP test with deterministic fixed-key vectors