[tor-bugs] #3122 [Tor Client]: Write and use constant-time comparison functions
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Fri May 6 21:15:28 UTC 2011
#3122: Write and use constant-time comparison functions
-------------------------+--------------------------------------------------
Reporter: rransom | Owner: ioerror
Type: enhancement | Status: new
Priority: major | Milestone:
Component: Tor Client | Version:
Keywords: | Parent:
Points: | Actualpoints:
-------------------------+--------------------------------------------------
We should have constant-time comparison functions available in Tor, and
use them whenever we compare cryptographic values or passwords.
We probably don't need to do ''all'' of our comparisons of digests in
constant time, but once we have constant-time comparison functions
around, it will be easier to use them than to convince ourselves that we
don't need to in any particular spot.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3122>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list