- Assertions from real devices were rejected with
invalidSignature. Apple's
guide only requires the signature to be "valid for nonce", without stating
whether the nonce is the signed digest or the signed message.AssertionVerifier
now accepts both readings — they cover identical bytes and both require the
attested private key, so this is a compatibility measure, not a weaker check.
Full Changelog: 1.2.0...1.2.1