]> git.ipfire.org Git - thirdparty/hostap.git/commit
EAP-SAKE: Use os_memcmp_const() for hash/password comparisons
authorJouni Malinen <j@w1.fi>
Sun, 29 Jun 2014 17:19:59 +0000 (20:19 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 2 Jul 2014 09:38:47 +0000 (12:38 +0300)
commitdfb56081391eff5cf3a46898ff1046c588d82005
treec8214be308b5b7fb7c01d0afd8c9be1f278c2980
parent05c79d6acdf2800cfe9d7d8a3a1e8f8545a53a03
EAP-SAKE: Use os_memcmp_const() for hash/password comparisons

This makes the implementation less likely to provide useful timing
information to potential attackers from comparisons of information
received from a remote device and private material known only by the
authorized devices.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/eap_peer/eap_sake.c
src/eap_server/eap_server_sake.c