[issue15061] hmac.secure_compare() leaks information about length of strings

Martin v. Löwis report at bugs.python.org
Thu Jun 14 13:17:11 CEST 2012


Martin v. Löwis <martin at v.loewis.de> added the comment:

I recommend to revert the addition of the function, given that it can't be made secure.

----------
nosy: +loewis

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15061>
_______________________________________


More information about the Python-bugs-list mailing list