Use constant-time hash comparison functions

XMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Done
    • Priority: Major - P3
    • 3.1.0
    • Affects Version/s: None
    • Component/s: Authentication
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      As of Java 6, Update 17, MessageDigest.isEqual is implemented with a constant time comparison function, so the driver can use that to compare the hashes for its SCRAM-SHA1 implementation instead of String.equals.

              Assignee:
              Jeffrey Yemin
              Reporter:
              Rathi Gnanasekaran (Inactive)
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: