Reject DER-encoded asymmetric keys as HMAC secrets (CVE-2026-85394) - #422

Open

emgaurav wants to merge 2 commits into

mpdavis:masterfrom

emgaurav:fix/cve-2026-85394-der-hmac

Commits on Sep 16, 2026

Reject DER-encoded asymmetric keys as HMAC secrets (CVE-2026-85394)

zepto-gaurav
and
cursoragent
committed
1c243a0
Fix curve argument in test_incorrect_public_key_hmac_signing

zepto-gaurav
and
cursoragent
committed
83b6b73