[tor-bugs] #5543 [Tor Directory Authority]: BridgePassword would be insecure if anybody used it

[Tor Bug Tracker & Wiki]

#5543: BridgePassword would be insecure if anybody used it
-------------------------------------+--------------------------------------
 Reporter:  nickm                    |          Owner:                    
     Type:  defect                   |         Status:  needs_review      
 Priority:  major                    |      Milestone:  Tor: 0.2.2.x-final
Component:  Tor Directory Authority  |        Version:                    
 Keywords:                           |         Parent:                    
   Points:                           |   Actualpoints:                    
-------------------------------------+--------------------------------------
Changes (by nickm):

  * status:  new => needs_review


Comment:

 Please review branch "bridgepassword" on 0.2.2.x in my public repository.

 For fun, you can also see branch "di_strcmp" in my public repository:
 that's how you do a one-sided-data-independent strcmp, I think.  But the
 approach in "bridgepassword" is more solid, I think.

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5543#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online