]> git.ipfire.org Git - thirdparty/hostap.git/commit
EAP-PSK: Use os_memcmp_const() for hash/password comparisons
authorJouni Malinen <j@w1.fi>
Sun, 29 Jun 2014 17:24:10 +0000 (20:24 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 2 Jul 2014 09:38:47 +0000 (12:38 +0300)
commit468548255272aee552a83b578d1e6be08e5284c4
tree6707e2977ee3b3c7221f6fb5eaa73d82bf372ee8
parentcba0f8698b3edd254ae237b7921e0ec668051b79
EAP-PSK: Use os_memcmp_const() for hash/password comparisons

This makes the implementation less likely to provide useful timing
information to potential attackers from comparisons of information
received from a remote device and private material known only by the
authorized devices.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/eap_peer/eap_psk.c
src/eap_server/eap_server_psk.c