Skip to content

Using ConstantTimeCompare instead of regular string comparison#47

Merged
umputun merged 1 commit intogo-pkgz:masterfrom
vblz:pwd_timing_attack
May 4, 2020
Merged

Using ConstantTimeCompare instead of regular string comparison#47
umputun merged 1 commit intogo-pkgz:masterfrom
vblz:pwd_timing_attack

Conversation

@vblz
Copy link
Copy Markdown
Contributor

@vblz vblz commented May 4, 2020

To avoid timing attack

Copy link
Copy Markdown
Member

@umputun umputun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM. Btw, usage of admin password is something mostly for dev/testing, but still worth to be paranoid a little bit ;)

@umputun umputun merged commit 98b99d2 into go-pkgz:master May 4, 2020
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants