#3122: Write and use constant-time comparison functions
-------------------------+--------------------------------------------------
Reporter: rransom | Owner: ioerror
Type: enhancement | Status: new
Priority: major | Milestone:
Component: Tor Client | Version:
Keywords: | Parent:
Points: | Actualpoints:
-------------------------+--------------------------------------------------
We should have constant-time comparison functions available in Tor, and
use them whenever we compare cryptographic values or passwords.
We probably don't need to do ''all'' of our comparisons of digests in
constant time, but once we have constant-time comparison functions
around, it will be easier to use them than to convince ourselves that we
don't need to in any particular spot.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3122>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
[email protected]
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs
