Timing Attack

shrine is vulnerable to a timing attack. Failure to compare sent and calculated signatures in constant time allows an attacker to guess the signature of the derivation URL during the use of derivationendpoint plugin...