Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Reduce the vulnerability to timing attacks

Description

PR: https://github.com/truenas/middleware/pull/8822

It is recommended to use the [compare_digest()](https://docs.python.org/3/library/hmac.html#hmac.compare_digest) function instead of the == operator to reduce the vulnerability to timing attacks.

https://docs.python.org/3/library/crypt.html#examples

Problem/Justification

None

Impact

None

Activity

Show:

Bug Clerk 
April 23, 2022 at 12:05 PM

Bug Clerk 
April 23, 2022 at 12:05 PM

Complete

Details

Assignee

Reporter

Labels

Components

Fix versions

Priority

More fields

Katalon Platform

Created April 23, 2022 at 12:01 PM
Updated May 18, 2022 at 1:46 PM
Resolved April 26, 2022 at 3:30 PM