Matthew Dolan
Matthew Dolan
This is a very good question. I'm also not entirely sure why this hadn't been raised in any of the security scans the library has been in that I'd seen....
@dsatija CT checks will continue to work even after 70 days assuming the device is caching locally and/or can download a fresh copy of the log list files. Basically the...
@gnair03 The log-list.sig file is signed by Googles private key, so you cannot simply create one directly. Google provide a zip file which contains matching json and sig so in...
@gnair03 The longer answer to your initial question around the 70 days is while we attempt to update the library with an updated cached version as per my comment 2...
HI @davidburstromspotify, yes this is an excellent idea, and shouldn't be much work either.
Are there any particular wrappers that you think we could include built-in support for?
As a very quick workaround, so you are unblocked, you should be able to depend on the plugin as a jar already. Add the gradle plugins repository to the parent...
Will publish this next week and close then. Planning to split out #32 at the same time
Thanks @davidburstromspotify for the helpful comment. I've been meaning to look into this myself for quite a while! Since I wrote the initial version of the plugin I'm certain there...
Not sure if this will help or not, I converted the bouncycastle implementation to Kotlin for use in my own KMM hashing library - source available https://github.com/appmattus/crypto/tree/main/cryptohash/src/commonMain/kotlin/com/appmattus/crypto/internal/core/bouncycastle/blake2