golang/go
Vedi su GitHubx/website/_content/doc: refer that crypto/ecdsa.GenerateKey is no longer deterministic since Go 1.20
Closed
#62.255 aperta il 24 ago 2023
DocumentationNeedsInvestigationSecurityhelp wantedwebsite
Metriche repository
- Star
- (133.883 star)
- Metriche merge PR
- (Nessuna PR mergiata in 30 g)
Descrizione
This change (#58637) recently bit me when upgrading Go, and it left me mad looking for bugs in data transmission when the different keys were the problem.
I gained the habit of reading release notes (at least for major upgrades) to avoid issues, but only the change to the constant-time is mentioned. As it changes existing behavior, I believe it should be in the release notes, so that no one suffers the same fate :)