[tor-bugs] #3122 [Tor Client]: Write and use constant-time comparison functions

["Tor Bug Tracker & Wiki" <torproject-admin@xxxxxxxxxxxxxx>]

#3122: Write and use constant-time comparison functions
-------------------------+--------------------------------------------------
 Reporter:  rransom      |          Owner:  ioerror
     Type:  enhancement  |         Status:  new    
 Priority:  major        |      Milestone:         
Component:  Tor Client   |        Version:         
 Keywords:               |         Parent:         
   Points:               |   Actualpoints:         
-------------------------+--------------------------------------------------
 We should have constant-time comparison functions available in Tor, and
 use them whenever we compare cryptographic values or passwords.

 We probably don't need to do ''all'' of our comparisons of digests in
 constant time, but once we have constant-time comparison functions
 around, it will be easier to use them than to convince ourselves that we
 don't need to in any particular spot.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3122>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
_______________________________________________
tor-bugs mailing list
tor-bugs@xxxxxxxxxxxxxxxxxxxx
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-bugs