[tor-bugs] #3122 [Tor Client]: Write and use constant-time comparison functions
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Sat May 7 04:52:38 UTC 2011
#3122: Write and use constant-time comparison functions
-------------------------+--------------------------------------------------
Reporter: rransom | Owner: ioerror
Type: enhancement | Status: new
Priority: major | Milestone: Tor: 0.2.1.x-final
Component: Tor Client | Version:
Keywords: | Parent:
Points: | Actualpoints:
-------------------------+--------------------------------------------------
Comment(by nickm):
Oh, add another step to part I. Memcmp: "4.1. On a case-by-case basis,
change !tor_memneq(..) and tor_memneq(..)==0 into tor_memeq. This will
need to be done very carefully; it is exactly where I expect to screw up."
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3122#comment:10>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list