Uploaded image for project: 'Java Driver'
  1. Java Driver
  2. JAVA-1942

Use constant-time hash comparison functions

    XMLWordPrintableJSON

Details

    • Icon: Improvement Improvement
    • Resolution: Done
    • Icon: Major - P3 Major - P3
    • 3.1.0
    • None
    • Authentication
    • None

    Description

      As of Java 6, Update 17, MessageDigest.isEqual is implemented with a constant time comparison function, so the driver can use that to compare the hashes for its SCRAM-SHA1 implementation instead of String.equals.

      Attachments

        Activity

          People

            jeff.yemin@mongodb.com Jeffrey Yemin
            rathi.gnanasekaran Rathi Gnanasekaran
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: