[issue40791] hmac.compare_digest could try harder to be constant-time.

[Gregory P. Smith]

Gregory P. Smith <greg at krypto.org> added the comment:

I'd feel fine doing that for 3.9 given 3.9.0 is only in beta and this changes no public APIs.  For 3.8 and 3.7 i wouldn't.

Be sure to update the versionchanged in the docs if you choose to do it for 3.9.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue40791>
_______________________________________