On 15 April 2016 at 10:35, Victor Stinner <[email protected]> wrote: > 2016-04-15 11:21 GMT+02:00 Steven D'Aprano <[email protected]>: >> This isn't just a question about the secrets module. PEP 399 suggests >> than any C classes/functions should have a pure Python version as >> fallback, but compare_digest doesn't. I don't know whether it should or >> not. > > The hmac module is responsible to providing a fallback, not the secrets > module.
Agreed. The library docs state that the hmac module provides compare_digest, so you are therefore entitled to unconditionally import it (just as end user code would). Paul _______________________________________________ Python-Dev mailing list [email protected] https://mail.python.org/mailman/listinfo/python-dev Unsubscribe: https://mail.python.org/mailman/options/python-dev/archive%40mail-archive.com
