Fix chacha bug.

digitalbazaar · Aug 14, 2022 · dc90fe6 · dc90fe6
1 parent 6fa7c7f
commit dc90fe6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/lib/algorithms/xc20p.js b/lib/algorithms/xc20p.js
@@ -159,11 +159,11 @@ async function _hchacha20({key, nonce}) {
   const dvOut = new DataView(out.buffer, out.byteOffset, out.length);
   const dvDst = new DataView(dst.buffer, dst.byteOffset, dst.length);
   for(let i = 0; i < 4; ++i) {
-    dvOut.setUint32(i * 4, (state[i] - dvDst.getUint32(i * 4, LE)) | 0);
+    dvOut.setUint32(i * 4, (dvDst.getUint32(i * 4, LE) - state[i]) | 0, LE);
   }
   for(let i = 0; i < 4; ++i) {
     dvOut.setUint32(
-      i * 4 + 16, (state[i + 12] - dvDst.getUint32(i * 4 + 48, LE)) | 0);
+      i * 4 + 16, (dvDst.getUint32(i * 4 + 48, LE) - state[i + 12]) | 0, LE);
   }
 
   return out;