Introduction of timing attack safe bcmp implementation. - #4729
Closed
devnexen wants to merge 2 commits into
Closed
Conversation
staabm
reviewed
Sep 20, 2019
devnexen
force-pushed
the
safe_bcmp_intro
branch
2 times, most recently
from
September 25, 2019 13:01
49969b0 to
b7106eb
Compare
devnexen
force-pushed
the
safe_bcmp_intro
branch
from
April 28, 2020 05:12
6e5ef96 to
78a51c1
Compare
Member
Author
Member
|
Would it make sense to add the length check (both strings must have same length) to Anyway, could you please resolve the merge conflicts? |
Member
Author
|
Sure I can give it a try |
devnexen
force-pushed
the
safe_bcmp_intro
branch
2 times, most recently
from
December 28, 2021 17:05
757af67 to
955eaee
Compare
Member
|
This looks reasonable to me (not sure about adding a new file for that). More review welcome! |
Member
|
What's the status of this PR? Still waiting for review? Can we get this into master for 8.2? |
Member
Author
|
ping :-) |
Girgias
approved these changes
Jun 20, 2022
Member
There was a problem hiding this comment.
maybe add a comment either here to indicate that -1 is if the strings do not have the same lengths, 0 if they match and 1 if they are not equal?
Nothing new but to refactor usage b/w hash and password extensions but using volatile pointers to be a bit safer, allowing to expand its usage eventually.
devnexen
force-pushed
the
safe_bcmp_intro
branch
from
June 20, 2022 12:12
e79fb0e to
a76882b
Compare
Member
Author
|
Closed by bfe6f9e66 |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
6 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Nothing new but to refactor usage b/w hash and password
extensions but using volatile pointers to be a bit safer,
allowing to expand its usage eventually.