commit | 8abf2d69fa5aa4c78c1a6222336d6e0dff7904b3 | [log] [tgz] |
---|---|---|
author | Jan Lehnardt <jan@apache.org> | Fri Oct 14 15:57:17 2011 +0200 |
committer | Jan Lehnardt <jan@apache.org> | Fri Oct 14 15:59:59 2011 +0200 |
tree | ebf706d1c25b461673e1cf6a382fb0bb8e50a8fb | |
parent | 29cb4781fd095f4b194d0c400ee2b89e90824020 [diff] |
Use a constant time algorithm to compare signature strings. This guards against timing attacks of the class outlined in http://codahale.com/a-lesson-in-timing-attacks/