]> git.ipfire.org Git - thirdparty/apache/httpd.git/commit
mod_session_crypto: Authenticate the session data/cookie with a MAC (SipHash)
authorYann Ylavic <ylavic@apache.org>
Mon, 5 Dec 2016 23:43:05 +0000 (23:43 +0000)
committerYann Ylavic <ylavic@apache.org>
Mon, 5 Dec 2016 23:43:05 +0000 (23:43 +0000)
commitfed21b132df300fc039e8516a73cb1c7930fcec2
tree732b2278c36dbfcc2146af8b1c0fc8b3eea0a209
parenta7575094ee91ff73b24e4fe3fa2573e656cc052e
mod_session_crypto: Authenticate the session data/cookie with a MAC (SipHash)
to prevent deciphering or tampering with a padding oracle attack.

git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/trunk@1772812 13f79535-47bb-0310-9956-ffa450edef68
modules/session/mod_session_crypto.c