Re: [PATCH 0/6] Constant Time Memory Comparisons Are Important
From: Kalle Valo <hidden>
Date: 2017-06-11 08:13:12
Also in:
keyrings, linux-nfs, linux-wireless, lkml, netdev
"Jason A. Donenfeld" [off-list ref] writes:
Whenever you're comparing two MACs, it's important to do this using crypto_memneq instead of memcmp. With memcmp, you leak timing information, which could then be used to iteratively forge a MAC.
Do you have any pointers where I could learn more about this? -- Kalle Valo