aws · Aug 29, 2024 · Aug 29, 2024 · Aug 29, 2024 · Aug 29, 2024 · Oct 17, 2024
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.0.2](https://github.com/awslabs/aws-encryption-sdk-javascript/compare/v4.0.1...v4.0.2) (2024-10-21)
+
+**Note:** Version bump only for package aws-encryption-sdk-javascript
+
 ## [4.0.1](https://github.com/awslabs/aws-encryption-sdk-javascript/compare/v4.0.0...v4.0.1) (2024-07-30)
 
 ### Bug Fixes

diff --git a/lerna.json b/lerna.json
@@ -1,6 +1,6 @@
 {
   "packages": ["modules/*"],
-  "version": "4.0.1",
+  "version": "4.0.2",
   "command": {
     "bootstrap": {
       "nohoist": ["typedoc"]

diff --git a/modules/client-node/CHANGELOG.md b/modules/client-node/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.0.2](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.1...v4.0.2) (2024-10-21)
+
+**Note:** Version bump only for package @aws-crypto/client-node
+
 ## [4.0.1](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.0...v4.0.1) (2024-07-30)
 
 **Note:** Version bump only for package @aws-crypto/client-node

diff --git a/modules/client-node/package.json b/modules/client-node/package.json
@@ -9,7 +9,7 @@
     "CSE",
     "aws"
   ],
-  "version": "4.0.1",
+  "version": "4.0.2",
   "scripts": {
     "build": "tsc -b tsconfig.json",
     "lint": "run-s lint-*",

diff --git a/modules/decrypt-node/CHANGELOG.md b/modules/decrypt-node/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.0.2](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.1...v4.0.2) (2024-10-21)
+
+**Note:** Version bump only for package @aws-crypto/decrypt-node
+
 ## [4.0.1](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.0...v4.0.1) (2024-07-30)
 
 **Note:** Version bump only for package @aws-crypto/decrypt-node

diff --git a/modules/decrypt-node/package.json b/modules/decrypt-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aws-crypto/decrypt-node",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "scripts": {
     "prepublishOnly": "npm run build",
     "build": "tsc -b tsconfig.json && tsc -b tsconfig.module.json",

diff --git a/modules/decrypt-node/src/verify_stream.ts b/modules/decrypt-node/src/verify_stream.ts
@@ -129,7 +129,11 @@ export class VerifyStream extends PortableTransformWithType {
     const { currentFrame } = state
     if (!currentFrame) {
       const { buffer } = state
-      const frameBuffer = Buffer.concat([buffer, chunk])
+
+      // Buffer.concat can be expensive. If buffer is empty, just use the chunk.
+      const frameBuffer =
+        buffer.length > 0 ? Buffer.concat([buffer, chunk]) : chunk
+
       const frameHeader = decodeBodyHeader(frameBuffer, this._headerInfo, 0)
       if (!frameHeader) {
         // Need more data
@@ -192,13 +196,18 @@ export class VerifyStream extends PortableTransformWithType {
     if (chunk.length && tagLengthBytes > authTagBuffer.length) {
       const left = tagLengthBytes - authTagBuffer.length
       if (left > chunk.length) {
-        state.authTagBuffer = Buffer.concat([authTagBuffer, chunk])
+        // Buffer.concat can be expensive. If buffer is empty, just use the chunk.
+        state.authTagBuffer =
+          authTagBuffer.length > 0
+            ? Buffer.concat([authTagBuffer, chunk])
+            : chunk
         return callback()
       } else {
-        const finalAuthTagBuffer = Buffer.concat(
-          [authTagBuffer, chunk],
-          tagLengthBytes
-        )
+        // Buffer.concat can be expensive. If buffer is empty, just use the chunk.
+        const finalAuthTagBuffer =
+          authTagBuffer.length > 0
+            ? Buffer.concat([authTagBuffer, chunk], tagLengthBytes)
+            : chunk.slice(0, tagLengthBytes)
         if (this._verify) {
           this._verify.update(finalAuthTagBuffer)
         }

diff --git a/modules/example-node/CHANGELOG.md b/modules/example-node/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.0.2](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.1...v4.0.2) (2024-10-21)
+
+**Note:** Version bump only for package @aws-crypto/example-node
+
 ## [4.0.1](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.0...v4.0.1) (2024-07-30)
 
 **Note:** Version bump only for package @aws-crypto/example-node

diff --git a/modules/example-node/package.json b/modules/example-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aws-crypto/example-node",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "scripts": {
     "prepublishOnly": "npm run build",
     "build": "tsc -b tsconfig.json && tsc -b tsconfig.module.json",

diff --git a/modules/integration-node/CHANGELOG.md b/modules/integration-node/CHANGELOG.md
@@ -3,6 +3,10 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.0.2](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.1...v4.0.2) (2024-10-21)
+
+**Note:** Version bump only for package @aws-crypto/integration-node
+
 ## [4.0.1](https://github.com/aws/aws-encryption-sdk-javascript/compare/v4.0.0...v4.0.1) (2024-07-30)
 
 ### Bug Fixes

diff --git a/modules/integration-node/package.json b/modules/integration-node/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aws-crypto/integration-node",
-  "version": "4.0.1",
+  "version": "4.0.2",
   "scripts": {
     "build": "tsc -b tsconfig.json",
     "lint": "run-s lint-*",