[issue15061] hmac.secure_compare() leaks information about length of strings

[Christian Heimes]

Christian Heimes <lists at cheimes.de> added the comment:

Me neither but you didn't want it in the operator module in the first place (msg162882). :) Please make a decision. I'm happy to follow it.

My idea is to drop the pure Python implementation of compare_digest() and just use the C implementation.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15061>
_______________________________________