security: remove bytes() copies in child_key HMAC call; update hdkeys tests
- child_key passed bytes(parent.chain_code) and bytes(data) to hmac.new(), creating two immutable copies of key material (chain_code + private key prefix) that could not be zeroed; hmac.new() accepts bytearray directly - Update test_core_hdkeys.py for bytearray return type of derive_agent_sub_seed: isinstance check accepts both, set membership uses bytes() cast
sha256:1849809512befe58345931cf82b05a13f8ec794c7159ce86723757dbb575820d
sha
sha256:b2cef89ca02cf0142fe568accf0de1dc7155cfc5cc17d6956bf88eea9108e168
snapshot
0 comments
To add a comment, use the Muse CLI:
muse hub commit comment sha256:1849809512befe58345931cf82b05a13f8ec794c7159ce86723757dbb575820d --body "your comment"
No comments yet. Be the first to start the discussion.