Skip to content

hmac.compare_digest could try harder to be constant-time. #84968

@ssbr

Description

@ssbr
mannequin
BPO 40791
Nosy @rhettinger, @gpshead, @tiran, @benjaminp, @ssbr, @ned-deily, @mgorny, @miss-islington
PRs
  • bpo-40791: Make compare_digest more constant-time. #20444
  • bpo-40791: Use CRYPTO_memcmp() for compare_digest #20456
  • [3.9] bpo-40791: Use CRYPTO_memcmp() for compare_digest (GH-20456) #20461
  • [3.9] bpo-40791: Make compare_digest more constant-time. (GH-20444) #23436
  • [3.8] bpo-40791: Make compare_digest more constant-time. (GH-20444) #23437
  • [3.7] bpo-40791: Make compare_digest more constant-time. (GH-20444) #23438
  • [3.6] bpo-40791: Make compare_digest more constant-time. (GH-23438) #23767
  • Note: these values reflect the state of the issue at the time it was migrated and might not reflect the current state.

    Show more details

    GitHub fields:

    assignee = 'https://github.com/tiran'
    closed_at = <Date 2020-11-22.17:34:28.761>
    created_at = <Date 2020-05-27.07:41:07.020>
    labels = ['type-security', '3.8', '3.9', '3.10', '3.7', 'library']
    title = 'hmac.compare_digest could try harder to be constant-time.'
    updated_at = <Date 2020-12-14.17:11:27.035>
    user = 'https://github.com/ssbr'

    bugs.python.org fields:

    activity = <Date 2020-12-14.17:11:27.035>
    actor = 'ned.deily'
    assignee = 'christian.heimes'
    closed = True
    closed_date = <Date 2020-11-22.17:34:28.761>
    closer = 'benjamin.peterson'
    components = ['Library (Lib)']
    creation = <Date 2020-05-27.07:41:07.020>
    creator = 'Devin Jeanpierre'
    dependencies = []
    files = []
    hgrepos = []
    issue_num = 40791
    keywords = ['patch']
    message_count = 15.0
    messages = ['370053', '370094', '370108', '370109', '370121', '370122', '370124', '370195', '381530', '381531', '381533', '381624', '382972', '382993', '382995']
    nosy_count = 8.0
    nosy_names = ['rhettinger', 'gregory.p.smith', 'christian.heimes', 'benjamin.peterson', 'Devin Jeanpierre', 'ned.deily', 'mgorny', 'miss-islington']
    pr_nums = ['20444', '20456', '20461', '23436', '23437', '23438', '23767']
    priority = 'normal'
    resolution = 'fixed'
    stage = 'resolved'
    status = 'closed'
    superseder = None
    type = 'security'
    url = 'https://bugs.python.org/issue40791'
    versions = ['Python 3.6', 'Python 3.7', 'Python 3.8', 'Python 3.9', 'Python 3.10']

    Metadata

    Metadata

    Assignees

    Labels

    3.10only security fixes3.7 (EOL)end of life3.8 (EOL)end of life3.9only security fixesstdlibPython modules in the Lib dirtype-securityA security issue

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions

      pFad - Phonifier reborn

      Pfad - The Proxy pFad of © 2024 Garber Painting. All rights reserved.

      Note: This service is not intended for secure transactions such as banking, social media, email, or purchasing. Use at your own risk. We assume no liability whatsoever for broken pages.


      Alternative Proxies:

      Alternative Proxy

      pFad Proxy

      pFad v3 Proxy

      pFad v4 Proxy