[tor-bugs] #3122 [Tor Client]: Write and use constant-time comparison functions
Tor Bug Tracker & Wiki
torproject-admin at torproject.org
Sat May 7 07:30:44 UTC 2011
#3122: Write and use constant-time comparison functions
-------------------------+--------------------------------------------------
Reporter: rransom | Owner: ioerror
Type: enhancement | Status: new
Priority: major | Milestone: Tor: 0.2.1.x-final
Component: Tor Client | Version:
Keywords: | Parent:
Points: | Actualpoints:
-------------------------+--------------------------------------------------
Comment(by rransom):
Replying to [comment:8 nickm]:
> I. Memcmp
> 1. Define a new tor_memcmp and a new tor_memneq. Both should be data-
independent. Define a fast_memcmp that aliases the platform memcmp().
That's just there so that any unadorned memcmp() in our code can be called
"incorrect".
See [http://repo.or.cz/w/tor-utils/rransom.git/shortlog/refs/heads/tor-
safe-memcmp tor-safe-memcmp in my tor-utils repo] (
!ssh://mob@repo.or.cz/srv/git/tor-utils/rransom.git tor-safe-memcmp ) for
tor_memcmp and a minimal unit test.
--
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/3122#comment:13>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online
More information about the tor-bugs
mailing list