feat: support React Native 0.83 (#14)

Author: diegolmello

.github/ISSUE_TEMPLATE/config.yml

@@ -1,8 +1,8 @@
 blank_issues_enabled: false
 contact_links:
   - name: Feature Request 💡
-    url: https://github.com/diegolmello/rocket.chat-mobile-crypto/discussions/new?category=ideas
+    url: https://github.com/RocketChat/rocket.chat-mobile-crypto/discussions/new?category=ideas
     about: If you have a feature request, please create a new discussion on GitHub.
   - name: Discussions on GitHub 💬
-    url: https://github.com/diegolmello/rocket.chat-mobile-crypto/discussions
+    url: https://github.com/RocketChat/rocket.chat-mobile-crypto/discussions
     about: If this library works as promised but you need help, please ask questions there.

CONTEXT.md

@@ -0,0 +1,41 @@
+# @rocket.chat/mobile-crypto
+
+A first-party React Native TurboModule that provides the native cryptographic
+primitives (SHA, HMAC, PBKDF2, AES, RSA, secure random) the Rocket.Chat mobile
+app relies on. It is a published, maintained package — not an abandoned fork
+pinned at a commit.
+
+## Language
+
+**Mobile Crypto**:
+This library — the native crypto provider consumed by the Rocket.Chat mobile app.
+_Avoid_: "the fork", "the pinned lib" (it is first-party and published).
+
+**E2E encryption**:
+Rocket.Chat end-to-end message and file encryption — the downstream feature that
+consumes Mobile Crypto's primitives. The reason byte-level output compatibility matters.
+_Avoid_: "E2E" unqualified (collides with end-to-end *testing*), "encryption" alone.
+
+**Known-answer harness**:
+The example app (`example/src/App.tsx`) — exercises every primitive with fixed
+`expected:` values for deterministic ops and round-trip checks for randomized ones.
+It is the conformance gate that proves a rebuild preserved behavior.
+_Avoid_: "the test app", "the demo".
+
+**Byte-compatible**:
+Produces output identical to the previously shipped version for deterministic
+operations (SHA, HMAC, PBKDF2, AES-CBC with fixed IV). Randomized operations
+(RSA-OAEP, RSA-PSS) are validated by round-trip instead, since byte-equality is
+not achievable for them.
+
+## Relationships
+
+- **E2E encryption** depends on **Mobile Crypto** producing **byte-compatible** output.
+- The **Known-answer harness** verifies **Mobile Crypto** is **byte-compatible** after a rebuild.
+
+## Flagged ambiguities
+
+- "E2E" was ambiguous between end-to-end *encryption* (this project's domain) and
+  end-to-end *testing* — resolved: in this repo "E2E" means encryption.
+- "fork" (from the originating ticket) implied an abandoned pinned dependency —
+  resolved: this is a maintained first-party package.

MobileCrypto.podspec

@@ -11,18 +11,22 @@ Pod::Spec.new do |s|
   s.authors      = package["author"]
 
   s.platforms    = { :ios => min_ios_version_supported }
-  s.source       = { :git => "https://github.com/diegolmello/rocket.chat-mobile-crypto.git", :tag => "#{s.version}" }
+  s.source       = { :git => "https://github.com/RocketChat/rocket.chat-mobile-crypto.git", :tag => "#{s.version}" }
 
   s.source_files = "ios/**/*.{h,m,mm,cpp,swift}"
   s.public_header_files = "ios/algorithms/AESCrypto.h", "ios/algorithms/RSACrypto.h", "ios/algorithms/CryptoUtils.h", "ios/algorithms/RandomUtils.h", "ios/algorithms/HMACCrypto.h", "ios/algorithms/PBKDF2Crypto.h", "ios/algorithms/SHACrypto.h", "ios/algorithms/FileUtils.h"
   s.private_header_files = "ios/MobileCrypto.h"
   s.swift_version = "5.0"
   s.requires_arc = true
 
-  # Minimal module configuration
+  # Module config — exposes the Swift-generated ObjC compat header so that
+  # AESCrypto.m can find "MobileCrypto-Swift.h" via double-quoted import.
+  # OBJECT_FILE_DIR_normal/$(CURRENT_ARCH) is where swiftc writes the header
+  # in static-lib (non-use_frameworks!) builds; add it to the search path.
   s.pod_target_xcconfig = {
     'DEFINES_MODULE' => 'YES',
-    'SWIFT_OBJC_INTERFACE_HEADER_NAME' => 'MobileCrypto-Swift.h'
+    'SWIFT_OBJC_INTERFACE_HEADER_NAME' => 'MobileCrypto-Swift.h',
+    'HEADER_SEARCH_PATHS' => '$(inherited) $(PODS_TARGET_SRCROOT)/ios/algorithms $(OBJECT_FILE_DIR_normal)/$(CURRENT_ARCH)'
   }
 
   # Ensure Swift files are properly compiled and linked

android/build.gradle

@@ -9,7 +9,7 @@ buildscript {
   }
 
   dependencies {
-    classpath "com.android.tools.build:gradle:8.7.2"
+    classpath "com.android.tools.build:gradle:8.12.0"
     // noinspection DifferentKotlinGradleVersion
     classpath "org.jetbrains.kotlin:kotlin-gradle-plugin:${getExtOrDefault('kotlinVersion')}"
   }
@@ -50,8 +50,12 @@ android {
   }
 
   compileOptions {
-    sourceCompatibility JavaVersion.VERSION_1_8
-    targetCompatibility JavaVersion.VERSION_1_8
+    sourceCompatibility JavaVersion.VERSION_17
+    targetCompatibility JavaVersion.VERSION_17
+  }
+
+  kotlinOptions {
+    jvmTarget = "17"
   }
 
   sourceSets {

android/gradle.properties

@@ -1,5 +1,5 @@
-MobileCrypto_kotlinVersion=2.0.21
+MobileCrypto_kotlinVersion=2.1.20
 MobileCrypto_minSdkVersion=24
-MobileCrypto_targetSdkVersion=34
-MobileCrypto_compileSdkVersion=35
+MobileCrypto_targetSdkVersion=36
+MobileCrypto_compileSdkVersion=36
 MobileCrypto_ndkVersion=27.1.12297006

android/src/main/java/chat/rocket/mobilecrypto/algorithms/RSACrypto.kt

@@ -183,11 +183,7 @@ object RSACrypto {
      * @return True if signature is valid
      */
     fun verify(signatureBase64: String, message: String, publicKeyPem: String, hashAlgorithm: String? = null): Boolean {
-        val publicKeyBytes = pemToKey(publicKeyPem)
-        val keySpec = X509EncodedKeySpec(publicKeyBytes)
-        val keyFactory = KeyFactory.getInstance("RSA")
-        val publicKey = keyFactory.generatePublic(keySpec)
-        
+        val publicKey = createPublicKeyFromPem(publicKeyPem)
         val signature = Signature.getInstance(getSignatureAlgorithm(hashAlgorithm))
         signature.initVerify(publicKey)
         signature.update(CryptoUtils.stringToUtf8Bytes(message))
@@ -205,11 +201,7 @@ object RSACrypto {
      * @return True if signature is valid
      */
     fun verifyBase64(signatureBase64: String, messageBase64: String, publicKeyPem: String, hashAlgorithm: String? = null): Boolean {
-        val publicKeyBytes = pemToKey(publicKeyPem)
-        val keySpec = X509EncodedKeySpec(publicKeyBytes)
-        val keyFactory = KeyFactory.getInstance("RSA")
-        val publicKey = keyFactory.generatePublic(keySpec)
-        
+        val publicKey = createPublicKeyFromPem(publicKeyPem)
         val signature = Signature.getInstance(getSignatureAlgorithm(hashAlgorithm))
         signature.initVerify(publicKey)
         val messageBytes = CryptoUtils.decodeBase64(messageBase64)

example/android/app/src/debug/AndroidManifest.xml

@@ -9,6 +9,7 @@
       android:roundIcon="@mipmap/ic_launcher_round"
       android:allowBackup="false"
       android:theme="@style/AppTheme"
+      android:usesCleartextTraffic="${usesCleartextTraffic}"
       android:supportsRtl="true">
       <activity
         android:name=".MainActivity"

example/android/app/src/main/AndroidManifest.xml

@@ -4,40 +4,24 @@ import android.app.Application
 import com.facebook.react.PackageList
 import com.facebook.react.ReactApplication
 import com.facebook.react.ReactHost
-import com.facebook.react.ReactNativeHost
-import com.facebook.react.ReactPackage
-import com.facebook.react.defaults.DefaultNewArchitectureEntryPoint.load
+import com.facebook.react.ReactNativeApplicationEntryPoint.loadReactNative
 import com.facebook.react.defaults.DefaultReactHost.getDefaultReactHost
-import com.facebook.react.defaults.DefaultReactNativeHost
-import com.facebook.soloader.SoLoader
-import com.facebook.react.soloader.OpenSourceMergedSoMapping
 
 class MainApplication : Application(), ReactApplication {
 
-  override val reactNativeHost: ReactNativeHost =
-      object : DefaultReactNativeHost(this) {
-        override fun getPackages(): List<ReactPackage> =
-            PackageList(this).packages.apply {
-              // Packages that cannot be autolinked yet can be added manually here, for example:
-              // add(MyReactNativePackage())
-            }
-
-        override fun getJSMainModuleName(): String = "index"
-
-        override fun getUseDeveloperSupport(): Boolean = BuildConfig.DEBUG
-
-        override val isNewArchEnabled: Boolean = BuildConfig.IS_NEW_ARCHITECTURE_ENABLED
-        override val isHermesEnabled: Boolean = BuildConfig.IS_HERMES_ENABLED
-      }
-
-  override val reactHost: ReactHost
-    get() = getDefaultReactHost(applicationContext, reactNativeHost)
+  override val reactHost: ReactHost by lazy {
+    getDefaultReactHost(
+      context = applicationContext,
+      packageList =
+        PackageList(this).packages.apply {
+          // Packages that cannot be autolinked yet can be added manually here, for example:
+          // add(MyReactNativePackage())
+        },
+    )
+  }
 
   override fun onCreate() {
     super.onCreate()
-    SoLoader.init(this, OpenSourceMergedSoMapping)
-    if (BuildConfig.IS_NEW_ARCHITECTURE_ENABLED) {
-      load()
-    }
+    loadReactNative(this)
   }
 }

example/android/app/src/main/java/rocketchat/mobilecrypto/example/MainApplication.kt

@@ -1,11 +1,11 @@
 buildscript {
     ext {
-        buildToolsVersion = "35.0.0"
+        buildToolsVersion = "36.0.0"
         minSdkVersion = 24
-        compileSdkVersion = 35
-        targetSdkVersion = 35
+        compileSdkVersion = 36
+        targetSdkVersion = 36
         ndkVersion = "27.1.12297006"
-        kotlinVersion = "2.0.21"
+        kotlinVersion = "2.1.20"
     }
     repositories {
         google()