projects / mech_eap.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a6eae3f) | patch
EAP-GTC: Use os_memcmp_const() for hash/password comparisons
authorJouni Malinen <j@w1.fi>
Sun, 29 Jun 2014 17:26:25 +0000 (20:26 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 2 Jul 2014 09:38:48 +0000 (12:38 +0300)
commit3e4b77c9bdcabb60ecb5253752cc2c1af5cb67e7
treedd377f60639added8245559e66618fb92eee176atree | snapshot
parenta6eae3f7a1477aaa15b2461340c2cd269da2232ccommit | diff
EAP-GTC: Use os_memcmp_const() for hash/password comparisons

This makes the implementation less likely to provide useful timing
information to potential attackers from comparisons of information
received from a remote device and private material known only by the
authorized devices.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/eap_server/eap_server_gtc.c diff | blob | history
Moonshot GSS-API mechanism