zeekay 5109f4adae Finalizing a zeroed Blind returned a different key instead of refusing ...

Zero clears the input, and Finalize length-prefixes that input into the hash.
So a Finalize after a Zero prefixed an absent input as empty and returned a
well-formed sixty-four bytes that were simply a different key, with a nil error
to accompany it. Both are ordinary calls on a Blind the package documents as
reusable, so the order is a caller's mistake to make; it must not be a silent
one. It now refuses.

2026-09-01 20:03:56 -07:00

..

oprf_test.go

Finalizing a zeroed Blind returned a different key instead of refusing

2026-09-01 20:03:56 -07:00

oprf.go

Finalizing a zeroed Blind returned a different key instead of refusing

2026-09-01 20:03:56 -07:00

proof_test.go

Write a proof in the order a conformant peer reads it

2026-09-01 19:28:42 -07:00

proof.go

Write a proof in the order a conformant peer reads it

2026-09-01 19:28:42 -07:00