In tink-java version 1.21.0 and all versions which were released before that, ChunkedMacVerification did not do constant time verification.
This was finally fixed on June 8 in 175df91.
This issue serves as a reference for this problem. Note that an issue was filed on June 11 reporting this (175df91) but since it was already fixed I closed the issue. Nevertheless, now I need a reference issue, so I open a new one.
In tink-java version 1.21.0 and all versions which were released before that, ChunkedMacVerification did not do constant time verification.
This was finally fixed on June 8 in 175df91.
This issue serves as a reference for this problem. Note that an issue was filed on June 11 reporting this (175df91) but since it was already fixed I closed the issue. Nevertheless, now I need a reference issue, so I open a new one.