golang/go
在 GitHub 查看x/website/_content/doc: refer that crypto/ecdsa.GenerateKey is no longer deterministic since Go 1.20
Closed
#62,255 创建于 2023年8月24日
DocumentationNeedsInvestigationSecurityhelp wantedwebsite
仓库指标
- Star
- (133,883 star)
- PR 合并指标
- (30 天内没有已合并 PR)
描述
This change (#58637) recently bit me when upgrading Go, and it left me mad looking for bugs in data transmission when the different keys were the problem.
I gained the habit of reading release notes (at least for major upgrades) to avoid issues, but only the change to the constant-time is mentioned. As it changes existing behavior, I believe it should be in the release notes, so that no one suffers the same fate :)