5 ms·
Serious question - what makes the database serialization not vulnerable to timing attacks in the same vein? I wouldn't expect those to be purely constant time i
by bpicolo 5y ago
Serious question - what makes the database serialization not vulnerable to timing attacks in the same vein? I wouldn't expect those to be purely constant time implementations.
- simonw 5y agoYou do the final comparison outside of the database after retrieving the stored value - I use the Python secrets.compare_digest() function for that.