subtle.ConstantTimeCompare(priv.seed[:], x.seed[:]) == 1 } func (priv *PrivateKey) Bytes() []byte { seed := priv.seed return seed[:] } func (priv *PrivateKey) PublicKey() *PublicKey { // Note that this is likely to keep the entire PrivateKey reachable for // the lifetime of the PublicKey, which may be undesirable. return &priv.pub } type PublicKey struct { raw [maxPubKeySize]byte p parameters a [maxK * maxL]nttElement t1 [maxK]nttElement // NTT(t₁ ⋅ 2ᵈ) tr [64]byte // public key hash } func (pub *PublicKey) Equal(x...

- Only extend token lifetimes when `--service-account-extend-token-expiration` is true and the requested token audiences are empty or exactly match all values for `--api-audiences`. ([#105954](https://github.com/kubernetes/kubernetes/pull/105954), [@jyotimahapatra](https://g...