Skip to content

Fix: Security hardening: constant-time digest comparison + regression tests#15

Merged
junkurihara merged 3 commits intodevelopfrom
fix/constant-time-content-digest
Feb 14, 2026
Merged

Fix: Security hardening: constant-time digest comparison + regression tests#15
junkurihara merged 3 commits intodevelopfrom
fix/constant-time-content-digest

Conversation

@junkurihara
Copy link
Owner

@junkurihara junkurihara commented Feb 14, 2026

Related to #14.

  • Use subtle::ConstantTimeEq for digest verification (defense-in-depth)
  • Add regression tests covering tampered body/header, missing header, and length mismatch
  • No API change; security hardening only

@junkurihara junkurihara merged commit 5533f59 into develop Feb 14, 2026
2 checks passed
@junkurihara junkurihara deleted the fix/constant-time-content-digest branch February 14, 2026 02:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant