[issue14532] multiprocessing module performs a time-dependent hmac comparison

[Antoine Pitrou]

Antoine Pitrou <pitrou at free.fr> added the comment:

You could rewrite:

    result |= x ^ y

as:

    result |= (x != y)

Of course, this assumes that the "!=" operator is constant-time for 1-element strings.

----------
nosy: +pitrou

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14532>
_______________________________________