Currently, MAC byte array values are compared using standard library methods that will return as soon as a result is calculated. Instead, there should be a more laborious check that tests each byte regardless of whether a result is already known. This will prevent timing attacks.
Currently, MAC byte array values are compared using standard library methods that will return as soon as a result is calculated. Instead, there should be a more laborious check that tests each byte regardless of whether a result is already known. This will prevent timing attacks.