mirror of
https://github.com/storytold/craft-libs.git
synced 2026-11-15 06:52:23 +00:00
The PKCS#12 MAC and the PDF security handler's /U, R5/R6 and file-key checks used plain equality, which stops at the first differing byte and narrows a guess. Both crates now use a length-checked comparison that folds every byte (the helper craft-offcrypto already used).