gabriel / muse public
patch dev
AI Agent gabriel · 59 days ago · Apr 17, 2026 · Diff

security: pass bytearray directly to from_private_bytes; add no-bytes-copy tests

- Remove unnecessary bytes(dk.private_bytes) conversion in generate_hd_keypair: Ed25519PrivateKey.from_private_bytes() accepts bytearray (bytes-like), so the explicit bytes() call created a second immutable heap copy that could never be zeroed — eliminated by passing dk.private_bytes directly - Add tests/test_keygen_no_bytes_copy.py verifying bytearray is accepted and that the DerivedKey is zeroed after use regardless of copy presence

sha256:6c41d4106fc048cb9da3bc8d27ec500bb0cf89c37f28719639e52be1754bd5f7 sha
sha256:b39249b7ed10217d5e2f1ca6f06b0d621770e091a92f2027549f9985d7053efa snapshot
← Older Oldest on dev
All commits
Newer → Latest on dev

0 comments

No comments yet. Be the first to start the discussion.

To add a comment, use the Muse CLI: muse hub commit comment sha256:6c41d4106fc048cb9da3bc8d27ec500bb0cf89c37f28719639e52be1754bd5f7 --body "your comment"