[tor-bugs] #3122 [Tor Client]: Write and use constant-time comparison functions

[Tor Bug Tracker & Wiki]

#3122: Write and use constant-time comparison functions
-------------------------+--------------------------------------------------
 Reporter:  rransom      |          Owner:  ioerror
     Type:  enhancement  |         Status:  new    
 Priority:  major        |      Milestone:         
Component:  Tor Client   |        Version:         
 Keywords:               |         Parent:         
   Points:               |   Actualpoints:         
-------------------------+--------------------------------------------------

Comment(by ioerror):

 Useful reading:
 http://rdist.root.org/2010/08/05/optimized-memcmp-leaks-useful-timing-
 differences/
 http://rdist.root.org/2010/07/19/exploiting-remote-timing-attacks/

 I'll look into writing a safer comparison that we can drop in.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3122#comment:3>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online