Use constant-time comparison for Kotlin cryptographic byte arrays

Proprietary

Use MessageDigest.isEqual for resolved Arrays.equals(ByteArray, ByteArray) or ByteArray.contentEquals when shared program analysis proves a digest or MAC output reaches the comparison. Other comparisons are preserved.

org.openrewrite.kotlin.security.UseConstantTimeCryptographicComparison

mod run . --recipe=org.openrewrite.kotlin.security.UseConstantTimeCryptographicComparison

Install it once from Recipe actions, then run it on every repository under the current directory. New to the Moderne CLI? Set it up.