3 ms·
This doesn't leak anything about the length of the correct password. This leaks information about the length of the guess, which the attacker already knows.
by jnwatson 8y ago
This doesn't leak anything about the length of the correct password. This leaks information about the length of the guess, which the attacker already knows.