Details
-
Improvement
-
Resolution: Done
-
Major - P3
-
None
-
None
Description
As of Java 6, Update 17, MessageDigest.isEqual is implemented with a constant time comparison function, so the driver can use that to compare the hashes for its SCRAM-SHA1 implementation instead of String.equals.
Attachments
Issue Links
- is depended on by
-
DRIVERS-255 Use constant-time hash comparison functions
-
- Closed
-