Miroslav Lichvar dab98fa8da util: add function for constant-time memory comparison ...

Add a function to check if two buffers of the same length contain the
same data, but do the comparison in a constant time with respect to the
returned value to avoid creating a timing side channel, i.e. the time
depends only on the buffer length, not on the content.

Use the gnutls_memcmp() or nettle_memeql_sec() functions if available,
otherwise use the same algorithm as nettle - bitwise ORing XORed data.

2025-04-03 16:05:04 +02:00

12 KiB

Raw Blame History

View Raw