mirror of
https://github.com/storytold/craft-libs.git
synced 2026-11-14 22:42:46 +00:00
The PKCS#12 MAC and the PDF security handler's /U, R5/R6 and file-key checks used plain equality, which stops at the first differing byte and narrows a guess. Both crates now use a length-checked comparison that folds every byte (the helper craft-offcrypto already used).