Message162763
With PEP 393 unicode objects can have several representations, which makes it unlikely that *really* constant-timing functions can be devised.
Speaking about this particular patch, I don't understand the point. secure_compare() is obviously meant to be used on inputs of some known length, not arbitrary data. |
|
Date |
User |
Action |
Args |
2012-06-14 09:31:26 | pitrou | set | recipients:
+ pitrou, arigo, christian.heimes, fijall, hynek |
2012-06-14 09:31:26 | pitrou | set | messageid: <1339666286.01.0.68883136263.issue15061@psf.upfronthosting.co.za> |
2012-06-14 09:31:25 | pitrou | link | issue15061 messages |
2012-06-14 09:31:25 | pitrou | create | |
|