[issue15061] hmac.secure_compare() leaks information about length of strings
Antoine Pitrou
report at bugs.python.org
Sat Jun 23 16:50:55 CEST 2012
Antoine Pitrou <pitrou at free.fr> added the comment:
> Me neither but you didn't want it in the operator module in the first
> place (msg162882). :) Please make a decision. I'm happy to follow it.
Oh, sorry. I've changed my mind about it, but I think the operator module should only export a private function (and hmac or hashlib export it publicly).
----------
_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue15061>
_______________________________________
More information about the Python-bugs-list
mailing list