]> git.ipfire.org Git - thirdparty/dhcpcd.git/commit
auth: Use consttime_memequal(3) to compare hashes
authorRoy Marples <roy@marples.name>
Fri, 26 Apr 2019 14:16:44 +0000 (15:16 +0100)
committerRoy Marples <roy@marples.name>
Fri, 26 Apr 2019 14:16:44 +0000 (15:16 +0100)
commite33994fe9a89da3d143b1e1f63a47a336328b2c2
tree2870ae90702b086cb8ea55aaec9f5c71f04e4c36
parent6adf6108ddb8d3e898aa715edfbaab0a900b4f8d
auth: Use consttime_memequal(3) to compare hashes
This stops any attacker from trying to infer secrets from latency.

Thanks to Maxime Villard <max@m00nbsd.net>
auth.c
compat/consttime_memequal.h [new file with mode: 0644]
configure