From 21b70c782a6c62abf959564534d83147065981d6 Mon Sep 17 00:00:00 2001 From: cinap_lenrek Date: Wed, 13 Jan 2016 21:48:09 +0100 Subject: [PATCH] devssl: use tsmemcmp() to compare mac to close timing side channel --- sys/src/9/port/devssl.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sys/src/9/port/devssl.c b/sys/src/9/port/devssl.c index 7e9133e8e..6f2b7e61e 100644 --- a/sys/src/9/port/devssl.c +++ b/sys/src/9/port/devssl.c @@ -1439,7 +1439,7 @@ checkdigestb(Dstate *s, Block *bin) *p = n; (*s->hf)(msgid, 4, digest, &ss); - if(memcmp(digest, bin->rp, s->diglen) != 0) + if(tsmemcmp(digest, bin->rp, s->diglen) != 0) error("bad digest"); }