git: 9front

Info  •  Files  •  Log  •  Branches

devssl: use tsmemcmp() to compare mac to close timing side channel

--- a/sys/src/9/port/devssl.c

+++ b/sys/src/9/port/devssl.c

@@ -1439,7 +1439,7 @@

 	*p = n;

 	(*s->hf)(msgid, 4, digest, &ss);

-	if(memcmp(digest, bin->rp, s->diglen) != 0)

+	if(tsmemcmp(digest, bin->rp, s->diglen) != 0)

 		error("bad digest");

 }

-- 

⑨