Skip to content

Ensure MAC calculations are resistant to timing attacks #1

@dmjones

Description

@dmjones

Currently, MAC byte array values are compared using standard library methods that will return as soon as a result is calculated. Instead, there should be a more laborious check that tests each byte regardless of whether a result is already known. This will prevent timing attacks.

Metadata

Metadata

Assignees

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions