hsiegeln 73e06d8164 test(web): cover constant-time compare path in HMAC verify ...

Existing rejectsTamperedSignature uses len+1 sig — short-circuits in
MessageDigest.isEqual on length mismatch. Same-length tamper test
forces the byte-by-byte compare so the constant-time branch is
exercised.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-27 15:30:13 +02:00

..

src

test(web): cover constant-time compare path in HMAC verify

2026-04-27 15:30:13 +02:00

pom.xml

test(license): LicenseLifecycleIT — install/persist/revalidate/reject

2026-04-26 15:56:01 +02:00