Be careful how you combine these components: https://soatok.blog/2021/07/30/canonicalization-attacks-against-macs-and-signatures/ https://soatok.blog/2021/07/30

Be careful how you combine these components: https://soatok.blog/2021/07/30/canonicalization-attacks-against-macs-and-signatures/ https://soatok.blog/2021/07/30/canonicalization-attacks-agai... (The linked article talks about CTR + HMAC, but CBC + HMAC is also affected.)