3 ms·
It's also pretty sad that they didn't use a constant time comparison function. Whether it exists in the target language standard library or not, it's easy enoug
by trebor 11y ago
It's also pretty sad that they didn't use a constant time comparison function. Whether it exists in the target language standard library or not, it's easy enough to write one.
- muaddirac 11y agoWanted to add that as of 3.3, Python has a nice constant-time compare built in: https://docs.python.org/3/library/hmac.html#hmac.compare_digest https://docs.python.org/3/library/hmac.html#hmac.compare_dig...
- d0vs 11y ago2.7 actually https://docs.python.org/2.7/library/hmac.html#hmac.compare_digest https://docs.python.org/2.7/library/hmac.html#hmac.compare_d...