HTTPSignatures

HTTPSignatures Burp Suite एक्सटेंशन HTTPSignatures एक Burp Suite एक्सटेंशन है जो Signing HTTP Messages draft-ietf-httpbis-message-signatures-01 विनिर्देश मसौदा दस्तावेज़ को लागू करता है। यह Burp Suite उपयोगकर्ताओं को HTTP Signatures की आवश्यकता वाले अनुप्रयोगों का निर्बाध रूप से परीक्षण करने की...

CVE-2025-59058

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version...

CVE-2025-59058 httpsig-rs's HMAC verification is vulnerable to timing attack

httpsig-rs is a Rust implementation of IETF RFC 9421 http message signatures. Prior to version 0.0.19, the HMAC signature comparison is not timing-safe. This makes anyone who uses HS256 signature verification vulnerable to a timing attack that allows the attacker to forge a signature. Version...

CVE-2025-59058

Affected software: httpsig-rs (Rust implementation of IETF RFC 9421 http message signatures). Vulnerability: Prior to version 0.0.19, HMAC signature comparison is not timing-safe, allowing a timing attack to forge signatures during HS256 verification. Impact (as stated): Attack could forge a sign...