Title: XOF hash function changed their default outputLength to zero byte · Issue #58913 · nodejs/node · GitHub
Open Graph Title: XOF hash function changed their default outputLength to zero byte · Issue #58913 · nodejs/node
X Title: XOF hash function changed their default outputLength to zero byte · Issue #58913 · nodejs/node
Description: Version v22.14.0 Platform Linux ### 6.15.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Tue, 10 Jun 2025 21:32:33 +0000 x86_64 GNU/Linux Subsystem crypto What steps will reproduce the bug? Try to hash anything using a variable length hash function (e....
Open Graph Description: Version v22.14.0 Platform Linux ### 6.15.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Tue, 10 Jun 2025 21:32:33 +0000 x86_64 GNU/Linux Subsystem crypto What steps will reproduce the bug? Try to hash anything u...
X Description: Version v22.14.0 Platform Linux ### 6.15.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Tue, 10 Jun 2025 21:32:33 +0000 x86_64 GNU/Linux Subsystem crypto What steps will reproduce the bug? Try to hash anything u...
Opengraph URL: https://github.com/nodejs/node/issues/58913
X: @github
Domain: github.com
{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"XOF hash function changed their default outputLength to zero byte","articleBody":"### Version\n\nv22.14.0\n\n### Platform\n\n```text\nLinux ### 6.15.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Tue, 10 Jun 2025 21:32:33 +0000 x86_64 GNU/Linux\n```\n\n### Subsystem\n\ncrypto\n\n### What steps will reproduce the bug?\n\nTry to hash anything using a variable length hash function (e.g. shake128), without any options you get an empty buffer/string.\n\n### How often does it reproduce? Is there a required condition?\n\nReproducible, but I haven't dissected the exact version the default changed. I known it is somewhere between v14.21.3 and v22.14.0 and yes I realize this is a very large window 😕 \n\n### What is the expected behavior? Why is that the expected behavior?\n\nshake128 should default to outputLength = 16 as in earlier Node.JS versions. Other variable-length (XOF) hashes should also default to sensible non-zero length.\n\nI believe it is sane to expect the following assertion:\n```js\nconst {getHashes, createHash } = require('crypto');\nassert.equal( 0 , getHashes().filter( h =\u003e !createHash(h).digest().length ).length )\n```\n\n### What do you see instead?\n\n```js\ngetHashes().filter( h =\u003e !createHash(h).digest().length ) == [ 'shake128', 'shake256' ]\n```\n\n### Additional information\n\n- Node 12.8.0 introduced the `outputLength` option to `crypto.createHash`\n- In Node 14.21.3 and earlier, when the option is omitted, shake128 defaults to 16 bytes output\n- In Node 22.14.0 and later, the default is zero, which results in empty hashes:\n\n```js\n\u003e require('crypto').createHash('shake128').update('test').digest()\n\u003cBuffer \u003e\n```\n\nThere are two issues here:\n- It is not backward compatible, and unless I missed something this breaking change is not documented, which resulted in breaking our app when upgrading node\n- In general, defaulting to null length by default is very countrer-intuitive","author":{"url":"https://github.com/antoinep92","@type":"Person","name":"antoinep92"},"datePublished":"2025-07-01T11:12:02.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":4},"url":"https://github.com/58913/node/issues/58913"}
| route-pattern | /_view_fragments/issues/show/:user_id/:repository/:id/issue_layout(.:format) |
| route-controller | voltron_issues_fragments |
| route-action | issue_layout |
| fetch-nonce | v2:2d59242c-1343-1727-8611-1ceb30964bd7 |
| current-catalog-service-hash | 81bb79d38c15960b92d99bca9288a9108c7a47b18f2423d0f6438c5b7bcd2114 |
| request-id | CDCC:12F25:E91B98:146D36F:6A4BEAF0 |
| html-safe-nonce | e4ad6e822cbe02f40ca332f1c8c6f3748d5ee15be5545cfcc6da06db7e6582fe |
| visitor-payload | eyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiJDRENDOjEyRjI1OkU5MUI5ODoxNDZEMzZGOjZBNEJFQUYwIiwidmlzaXRvcl9pZCI6IjUxMjA2MzE5NzM5NzUxNTc0ODgiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ== |
| visitor-hmac | 0a41e6005627091ee61448affe1c5cf6f7fd56d08f2d565145144590acef9512 |
| hovercard-subject-tag | issue:3192015671 |
| github-keyboard-shortcuts | repository,issues,copilot |
| google-site-verification | Apib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I |
| octolytics-url | https://collector.github.com/github/collect |
| analytics-location | / |
| fb:app_id | 1401488693436528 |
| apple-itunes-app | app-id=1477376905, app-argument=https://github.com/_view_fragments/issues/show/nodejs/node/58913/issue_layout |
| twitter:image | https://opengraph.githubassets.com/f45ed2b8046d7a665d3979b21697175fb5a90285526aa9eb8488676ccbeb21f6/nodejs/node/issues/58913 |
| twitter:card | summary_large_image |
| og:image | https://opengraph.githubassets.com/f45ed2b8046d7a665d3979b21697175fb5a90285526aa9eb8488676ccbeb21f6/nodejs/node/issues/58913 |
| og:image:alt | Version v22.14.0 Platform Linux ### 6.15.2-arch1-1 #1 SMP PREEMPT_DYNAMIC Tue, 10 Jun 2025 21:32:33 +0000 x86_64 GNU/Linux Subsystem crypto What steps will reproduce the bug? Try to hash anything u... |
| og:image:width | 1200 |
| og:image:height | 600 |
| og:site_name | GitHub |
| og:type | object |
| og:author:username | antoinep92 |
| hostname | github.com |
| expected-hostname | github.com |
| None | 0f5d3ba365b3985d75c32a5957c8635488d58dcf027ae6ae958eee7edaa306a2 |
| turbo-cache-control | no-preview |
| go-import | github.com/nodejs/node git https://github.com/nodejs/node.git |
| octolytics-dimension-user_id | 9950313 |
| octolytics-dimension-user_login | nodejs |
| octolytics-dimension-repository_id | 27193779 |
| octolytics-dimension-repository_nwo | nodejs/node |
| octolytics-dimension-repository_public | true |
| octolytics-dimension-repository_is_fork | false |
| octolytics-dimension-repository_network_root_id | 27193779 |
| octolytics-dimension-repository_network_root_nwo | nodejs/node |
| turbo-body-classes | logged-out env-production page-responsive |
| disable-turbo | false |
| browser-stats-url | https://api.github.com/_private/browser/stats |
| browser-errors-url | https://api.github.com/_private/browser/errors |
| release | f24da9b76b42d77b0bb458f810509565e9ba5f1a |
| ui-target | canary-1 |
| theme-color | #1e2327 |
| color-scheme | light dark |
Links:
Viewport: width=device-width