[issue14532] multiprocessing module performs a time-dependent hmac comparison

[Charles-François Natali]

Charles-François Natali <neologix at free.fr> added the comment:

> Therefore the expected digest changes each time.

Exactly.
Timing attacks (which aren't really new :-) depend on a constant digest to successively determine the characters composing the digest. Here, that won't work, because the digest changes every time.

----------
nosy: +neologix

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14532>
_______________________________________