-
Type: Improvement
-
Resolution: Done
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: Authentication
-
None
As of Java 6, Update 17, MessageDigest.isEqual is implemented with a constant time comparison function, so the driver can use that to compare the hashes for its SCRAM-SHA1 implementation instead of String.equals.
- is depended on by
-
DRIVERS-255 Use constant-time hash comparison functions
- Closed