"Jason A. Donenfeld" <ja...@zx2c4.com> writes: > Whenever you're comparing two MACs, it's important to do this using > crypto_memneq instead of memcmp. With memcmp, you leak timing information, > which could then be used to iteratively forge a MAC.
Do you have any pointers where I could learn more about this? -- Kalle Valo
