Re: [dev] [ubase] [PATCH 2/2] su: use "constant time" memcmp to compare password

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

From: Jakob Kramer <jakob.kramer_AT_gmx.de>
Date: Wed, 30 Apr 2014 11:36:14 +0200

The patch that I sent before does not check if both passwords are of the
same length, which is bad.

Received on Wed Apr 30 2014 - 11:36:14 CEST

This message: [ Message body ]
Next message: Jakob Kramer: "[PATCH 2/2] su: use "constant time" memcmp to compare password"
Previous message: Dimitris Papastamos: "Re: [dev] [ubase] [PATCH 1/2] su: zero out cryptpass"
In reply to: Jakob Kramer: "[dev] [ubase] [PATCH 2/2] su: use "constant time" memcmp to compare password"

Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]

This archive was generated by hypermail 2.3.0 : Wed Apr 30 2014 - 11:48:06 CEST