Changes for version 0.019 - 2026-03-05
- Method 'memcmp' and Span->cmp are now constant-time operations, protecting against timing attacks when comparing passwords.
- Method ->scan has a new CONST_TIME flag that improves protection against timing attacks, but needs more work.
- The ::PEM object has an improved design where ->header_kv is the official array of attributes and 'headers' is a view of that array, providing features like multi-value, case-insensitivity, and whitespace trimming without modifying the original array.
- Breaking Change: The return value of ->scan on failure to match is now an empty list, where previously it was (x,0) where x was sometimes useful and sometimes not and would vary depending on other flags.
Modules
Prevent accidentally leaking a string of sensitive data
Observe results of a write_async operation
Disable TTY echo within a scope
Parse INI format from a SecretBuffer
Parse PEM format from a SecretBuffer
Inspect or alter arrayref of PEM headers as if it was a hashref
Reference a span of bytes within a SecretBuffer
Provides
in lib/Crypt/SecretBuffer.pm