Files
Niels Beier a0d58fca9e test(crypto): add regression tests for HMAC verify constant-time fix
Add check_hmac_verify_constanttime, exercising the OpenSSL
HMAC-SHA1/SHA256 verify helpers directly. A correct signature must
verify, a same-length signature with one flipped bit must be
rejected (guards the constant-time comparison), and a signature
shorter than the expected digest must be rejected without reading
past its end (guards the length check). The AddressSanitizer job in
CI will catch a regression of the latter.

Internal Vulnerability Advisory: open62541-SA-2026-0038
2026-09-15 20:31:48 +02:00
..