[issue14532] multiprocessing module performs a time-dependent hmac comparison
Jon Oberheide
report at bugs.python.org
Wed Apr 11 15:51:58 CEST 2012
Jon Oberheide <jon at oberheide.org> added the comment:
Ah yeah, I suppose it's not be exploitable in this case due to the challenge nonce.
However, it might still be a good thing to fix for to set an example for other hmac module users (internal or external) that might not have the same situation.
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14532>
_______________________________________
More information about the Python-bugs-list
mailing list