[Python-Dev] Should secrets include a fallback for hmac.compare_digest?

Victor Stinner victor.stinner at gmail.com
Fri Apr 15 04:26:31 EDT 2016


It's easy to implement this function (in the native language of your Python
implemenation), it's short. I'm not sure that a Python version is really
safe.

The secrets module is for Python 3.6, in this version the hmac already
"requires" the compare_digest() function no?

Victor
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python-dev/attachments/20160415/06f7656b/attachment.html>


More information about the Python-Dev mailing list