golang/go
Auf GitHub ansehenx/website/_content/doc: refer that crypto/ecdsa.GenerateKey is no longer deterministic since Go 1.20
Open
#62.255 geöffnet am 24. Aug. 2023
DocumentationNeedsInvestigationSecurityhelp wantedwebsite
Repository-Metriken
- Stars
- (133.883 Stars)
- PR-Merge-Metriken
- (Keine gemergten PRs in 30 T)
Beschreibung
This change (#58637) recently bit me when upgrading Go, and it left me mad looking for bugs in data transmission when the different keys were the problem.
I gained the habit of reading release notes (at least for major upgrades) to avoid issues, but only the change to the constant-time is mentioned. As it changes existing behavior, I believe it should be in the release notes, so that no one suffers the same fate :)