From 741982704428a75f4f8f9df71baa3790811e8618 Mon Sep 17 00:00:00 2001 From: Songstats Audit Date: Sat, 29 Aug 2026 22:27:17 +0200 Subject: [PATCH] Rebuild verification context for each signature --- lib/cose/sign.rb | 19 +++++++++---------- 1 file changed, 9 insertions(+), 10 deletions(-) diff --git a/lib/cose/sign.rb b/lib/cose/sign.rb index c1c5188..c3077bd 100644 --- a/lib/cose/sign.rb +++ b/lib/cose/sign.rb @@ -39,16 +39,15 @@ def verify(key, external_aad = nil) private def verification_data(signature, external_aad = nil) - @verification_data ||= - CBOR.encode( - [ - CONTEXT, - serialized_map(protected_headers), - serialized_map(signature.protected_headers), - external_aad || ZERO_LENGTH_BIN_STRING, - payload - ] - ) + CBOR.encode( + [ + CONTEXT, + serialized_map(protected_headers), + serialized_map(signature.protected_headers), + external_aad || ZERO_LENGTH_BIN_STRING, + payload + ] + ) end end end