Use constant-time memcmp when comparing sensitive buffers
commitb19633f9b94fbfff3777a432d02e0bf5405f372b
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Thu, 17 Feb 2022 02:35:51 +0000 (17 15:35 +1300)
committerJeffrey Altman <jaltman@auristor.com>
Sat, 30 Apr 2022 17:35:52 +0000 (30 13:35 -0400)
tree63ed3fb0f35e53690f9a94d7195a0ba3094dc969
parent20f038f4f0b506a580c2c70ddcfe3a86e026781d
Use constant-time memcmp when comparing sensitive buffers

This helps to avoid timing attacks.

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
kdc/digest-service.c
kdc/digest.c
lib/gssapi/krb5/8003.c
lib/gssapi/krb5/arcfour.c
lib/gssapi/netlogon/crypto.c
lib/gssapi/ntlm/crypto.c
lib/hcrypto/rsa.c
lib/ntlm/ntlm.c
lib/otp/otp_verify.c