[issue14532] multiprocessing module performs a time-dependent hmac comparison

R. David Murray report at bugs.python.org
Wed Apr 11 17:11:08 CEST 2012


R. David Murray <rdmurray at bitdance.com> added the comment:

It would also be reasonable to add a comment to the code mentioning why this particular (security) comparison is *not* vulnerable to a timing attack, which would serve the education purpose if someone does look at the code.

----------
nosy: +r.david.murray

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14532>
_______________________________________


More information about the Python-bugs-list mailing list