]> git.ipfire.org Git - thirdparty/dovecot/core.git/commit
auth: Shuffle failed auth requests before sending the failure replies.
authorTimo Sirainen <timo.sirainen@dovecot.fi>
Sun, 9 Apr 2017 12:31:11 +0000 (15:31 +0300)
committerGitLab <gitlab@git.dovecot.net>
Tue, 11 Apr 2017 12:55:26 +0000 (15:55 +0300)
commite18b4e41d9718a199a1980688787c2743c870002
tree2c796bafb77849552db242d0abb449d89915970a
parent2656508b1a5782070c0f4d6d3dfe2ac54c964370
auth: Shuffle failed auth requests before sending the failure replies.

This might be helpful against some timing attacks.

Using Fisher–Yates shuffle.
src/auth/auth-request-handler.c