]> git.ipfire.org Git - thirdparty/dhcpcd.git/commit
auth: Use consttime_memequal(3) to compare hashes
authorRoy Marples <roy@marples.name>
Fri, 19 Apr 2019 20:40:14 +0000 (21:40 +0100)
committerRoy Marples <roy@marples.name>
Fri, 19 Apr 2019 20:40:14 +0000 (21:40 +0100)
commit05da1daf2a34b00f7bd8572697f66f2481f4df29
tree8a8fe409cabc4ae65de51282d69fdc0a0387d2de
parent123833d7ff3ade7bda16a6bf77553ce369a3c666
auth: Use consttime_memequal(3) to compare hashes

This stops any attacker from trying to infer secrets from latency.

Thanks to Maxime Villard <max@m00nbsd.net>
src/auth.c