> The VerifyHMAC() function unconditionally returns true when the HMAC field is empty
This kind of thing is super common in vibecoded crypto, I wonder why it keeps happening.
This kind of thing is super common in vibecoded crypto, I wonder why it keeps happening.
Edit: here is an example of the process and output with something I put together the other day: https://github.com/RALaBarge/garlicpress/blob/master/portfol...