Skip to content

Remove dependencies on noble/curves, hashes from @hpke/dhkem-secp256k1. #583

@dajiaji

Description

@dajiaji

Is your feature request related to a problem? Please describe.

noble/curves and noble/hashes are excellent libraries, but we only require a small subset of their functionality.
Since full-scope version upgrades occur relatively frequently, keeping up with them incurs ongoing maintenance costs. Moreover, dependencies on external libraries can introduce supply chain vulnerabilities.

Describe the solution you'd like

Therefore, we intend to import only the minimal necessary functionality into hpke-js and maintain it internally.

Describe alternatives you've considered

Nothing.

Additional context

Nothing.

Metadata

Metadata

Assignees

Labels

enhancementNew feature or request

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions