JavaScript and TypeScript SHA-256 implementation that runs in modern browsers and Node.js, using typed arrays. It provides SHA-256 hashing plus HMAC-SHA-256, and key derivation via PBKDF2-HMAC-SHA256 and HKDF, with functions that accept and return Uint8Array data.
Project status
- Actively maintained: Not clearly. The last upstream push was 2023-07-12, but the most recent published updates were v1.1.0 (2017-11-17), indicating a long period of little to no ongoing release activity.
- Update cadence: Historically, there were v1.0.1 and v1.1.0 in the same week of 2017, followed by a very large gap to today (2026-09-10), suggesting no regular cadence.
AI summary generated
Recent updates
v1.1.0
Release v1.1.0 mainly updates licensing and build tooling, including adding the Unlicense text and adjusting the UMD/ES module interop (`exports.__esModule`). The shipped cryptographic implementation changes are small but there are internal method and typing differences related to HMAC state handling.
v1.0.1
Release v1.0.1 contains a small but notable set of internal refactors around SHA-256 state saving/restoring for HMAC, plus TypeScript definition updates. There are also packaging/build-related changes (version, license, devDependency upgrades) and documentation tweaks, but no user-facing release notes were provided.
Breakingv1.0.0
This release v1.0.0 ports the project to TypeScript, with the published JavaScript build now generated from the TypeScript source. It also adds named exports for Hash and HMAC classes.
Features