René's URL Explorer Experiment


Title: Issue 15061: hmac.secure_compare() leaks information about length of strings - Python tracker

Mail addresses
pitrou@free.fr
report@bugs.python.org
ncoghlan@gmail.com
report@bugs.python.org
report@bugs.python.org
martin@v.loewis.de
report@bugs.python.org
report@bugs.python.org
hs@ox.cx
report@bugs.python.org
martin@v.loewis.de
report@bugs.python.org

direct link

Domain: bugs.python.org

Nonetext/html; charset=utf-8

Links:

https://bugs.python.org/
Python Homehttps://www.python.org/
Abouthttps://www.python.org/about/
Newshttps://www.python.org/blogs/
Documentationhttps://www.python.org/doc/
Downloadshttps://www.python.org/downloads/
Communityhttps://www.python.org/community/
Foundationhttps://www.python.org/psf/
Developer's Guidehttps://devguide.python.org/
Issue Trackerhttps://bugs.python.org/
Searchhttps://bugs.python.org/issue?@template=search&status=1
Random Issuehttps://bugs.python.org/issue?@action=random
Issues with patchhttps://bugs.python.org/issue?status=1&@sort=-activity&@columns=id%2Cgithub%2Cactivity%2Ctitle%2Ccreator%2Cstatus&@dispname=Issues%20with%20patch&@startwith=0&@group=priority&keywords=2&@action=search&@filter=&@pagesize=50
Easy issueshttps://bugs.python.org/issue?status=1&@sort=-activity&@columns=id%2Cgithub%2Cactivity%2Ctitle%2Ccreator%2Cstatus&@dispname=Easy%20issues&@startwith=0&@group=priority&keywords=6&@action=search&@filter=&@pagesize=50
Statshttps://bugs.python.org/issue?@template=stats
Lost your login?https://bugs.python.org/user?@template=forgotten
User Listhttps://bugs.python.org/user?@sort=username
Committer Listhttps://bugs.python.org/user?iscommitter=1&@action=search&@sort=username&@pagesize=300
Tracker Documentationhttp://docs.python.org/devguide/triaging.html
Tracker Developmenthttp://wiki.python.org/moin/TrackerDevelopment
Report Tracker Problemhttps://github.com/python/psf-infra-meta/issues
https://github.com/python/cpython/issues
GitHubhttps://github.com/python/cpython/issues
see the GitHub FAQs in the Python's Developer Guide.https://devguide.python.org/gh-faq/
This issue has been migrated to GitHub: https://github.com/python/cpython/issues/59266 https://github.com/python/cpython/issues/59266
Titlehttp://docs.python.org/devguide/triaging.html#title
Typehttp://docs.python.org/devguide/triaging.html#type
Stagehttp://docs.python.org/devguide/triaging.html#stage
Componentshttp://docs.python.org/devguide/triaging.html#components
Versionshttp://docs.python.org/devguide/triaging.html#versions
Statushttp://docs.python.org/devguide/triaging.html#status
Resolutionhttp://docs.python.org/devguide/triaging.html#resolution
Dependencieshttp://docs.python.org/devguide/triaging.html#dependencies
Supersederhttp://docs.python.org/devguide/triaging.html#superseder
Assigned Tohttp://docs.python.org/devguide/triaging.html#assigned-to
Nosy Listhttp://docs.python.org/devguide/triaging.html#nosy-list
Priorityhttp://docs.python.org/devguide/triaging.html#priority
Keywordshttp://docs.python.org/devguide/triaging.html#keywords
secure_compare_length.patchhttps://bugs.python.org/file26003/secure_compare_length.patch
reviewhttps://bugs.python.org/review/15061/#ps5134
timingsafe.hhttps://bugs.python.org/file26068/timingsafe.h
timingsafe_cmp.patchhttps://bugs.python.org/file26079/timingsafe_cmp.patch
reviewhttps://bugs.python.org/review/15061/#ps5181
timingsafe_cmp-2.patchhttps://bugs.python.org/file26106/timingsafe_cmp-2.patch
reviewhttps://bugs.python.org/review/15061/#ps5201
compare_digest_c.patchhttps://bugs.python.org/file26112/compare_digest_c.patch
reviewhttps://bugs.python.org/review/15061/#ps5206
compare_digest_c-2.patchhttps://bugs.python.org/file26120/compare_digest_c-2.patch
reviewhttps://bugs.python.org/review/15061/#ps5214
msg162739https://bugs.python.org/issue15061#msg162739
(view)https://bugs.python.org/msg162739
#14955https://bugs.python.org/issue14955
msg162758https://bugs.python.org/issue15061#msg162758
(view)https://bugs.python.org/msg162758
msg162759https://bugs.python.org/issue15061#msg162759
(view)https://bugs.python.org/msg162759
msg162760https://bugs.python.org/issue15061#msg162760
(view)https://bugs.python.org/msg162760
msg162761https://bugs.python.org/issue15061#msg162761
(view)https://bugs.python.org/msg162761
#14955https://bugs.python.org/issue14955
http://bugs.python.org/file25801/secure-compare-fix-v2.patchhttp://bugs.python.org/file25801/secure-compare-fix-v2.patch
msg162762https://bugs.python.org/issue15061#msg162762
(view)https://bugs.python.org/msg162762
msg162763https://bugs.python.org/issue15061#msg162763
(view)https://bugs.python.org/msg162763
PEP 393https://www.python.org/dev/peps/pep-0393/
msg162764https://bugs.python.org/issue15061#msg162764
(view)https://bugs.python.org/msg162764
#14955https://bugs.python.org/issue14955
msg162765https://bugs.python.org/issue15061#msg162765
(view)https://bugs.python.org/msg162765
msg162766https://bugs.python.org/issue15061#msg162766
(view)https://bugs.python.org/msg162766
msg162767https://bugs.python.org/issue15061#msg162767
(view)https://bugs.python.org/msg162767
msg162768https://bugs.python.org/issue15061#msg162768
(view)https://bugs.python.org/msg162768
msg162769https://bugs.python.org/issue15061#msg162769
(view)https://bugs.python.org/msg162769
msg162770https://bugs.python.org/issue15061#msg162770
(view)https://bugs.python.org/msg162770
msg162773https://bugs.python.org/issue15061#msg162773
(view)https://bugs.python.org/msg162773
msg162775https://bugs.python.org/issue15061#msg162775
(view)https://bugs.python.org/msg162775
msg162777https://bugs.python.org/issue15061#msg162777
(view)https://bugs.python.org/msg162777
msg162778https://bugs.python.org/issue15061#msg162778
(view)https://bugs.python.org/msg162778
msg162838https://bugs.python.org/issue15061#msg162838
(view)https://bugs.python.org/msg162838
http://mjg59.dreamwidth.org/13061.htmlhttp://mjg59.dreamwidth.org/13061.html
msg162845https://bugs.python.org/issue15061#msg162845
(view)https://bugs.python.org/msg162845
msg162846https://bugs.python.org/issue15061#msg162846
(view)https://bugs.python.org/msg162846
msg162847https://bugs.python.org/issue15061#msg162847
(view)https://bugs.python.org/msg162847
msg162848https://bugs.python.org/issue15061#msg162848
(view)https://bugs.python.org/msg162848
msg162850https://bugs.python.org/issue15061#msg162850
(view)https://bugs.python.org/msg162850
https://github.com/mitsuhiko/python-pbkdf2/blob/master/pbkdf2.pyhttps://github.com/mitsuhiko/python-pbkdf2/blob/master/pbkdf2.py
msg162852https://bugs.python.org/issue15061#msg162852
(view)https://bugs.python.org/msg162852
msg162853https://bugs.python.org/issue15061#msg162853
(view)https://bugs.python.org/msg162853
https://github.com/mitsuhiko/python-pbkdf2/blob/master/pbkdf2.pyhttps://github.com/mitsuhiko/python-pbkdf2/blob/master/pbkdf2.py
msg162855https://bugs.python.org/issue15061#msg162855
(view)https://bugs.python.org/msg162855
msg162856https://bugs.python.org/issue15061#msg162856
(view)https://bugs.python.org/msg162856
msg162857https://bugs.python.org/issue15061#msg162857
(view)https://bugs.python.org/msg162857
msg162858https://bugs.python.org/issue15061#msg162858
(view)https://bugs.python.org/msg162858
http://bugs.python.org/issue15061http://bugs.python.org/issue15061
msg162859https://bugs.python.org/issue15061#msg162859
(view)https://bugs.python.org/msg162859
http://bugs.python.org/issue15061http://bugs.python.org/issue15061
msg162860https://bugs.python.org/issue15061#msg162860
(view)https://bugs.python.org/msg162860
msg162861https://bugs.python.org/issue15061#msg162861
(view)https://bugs.python.org/msg162861
msg162862https://bugs.python.org/issue15061#msg162862
(view)https://bugs.python.org/msg162862
#14532https://bugs.python.org/issue14532
http://bugs.python.org/issue14532#msg158045http://bugs.python.org/issue14532#msg158045
msg162863https://bugs.python.org/issue15061#msg162863
(view)https://bugs.python.org/msg162863
msg162864https://bugs.python.org/issue15061#msg162864
(view)https://bugs.python.org/msg162864
msg162865https://bugs.python.org/issue15061#msg162865
(view)https://bugs.python.org/msg162865
msg162866https://bugs.python.org/issue15061#msg162866
(view)https://bugs.python.org/msg162866
msg162867https://bugs.python.org/issue15061#msg162867
(view)https://bugs.python.org/msg162867
http://bugs.python.org/issue15061http://bugs.python.org/issue15061
msg162868https://bugs.python.org/issue15061#msg162868
(view)https://bugs.python.org/msg162868
msg162871https://bugs.python.org/issue15061#msg162871
(view)https://bugs.python.org/msg162871
msg162872https://bugs.python.org/issue15061#msg162872
(view)https://bugs.python.org/msg162872
msg162873https://bugs.python.org/issue15061#msg162873
(view)https://bugs.python.org/msg162873
msg162875https://bugs.python.org/issue15061#msg162875
(view)https://bugs.python.org/msg162875
msg162877https://bugs.python.org/issue15061#msg162877
(view)https://bugs.python.org/msg162877
http://seb.dbzteam.org/crypto/python-oauth-timing-hmac.pdfhttp://seb.dbzteam.org/crypto/python-oauth-timing-hmac.pdf
msg162880https://bugs.python.org/issue15061#msg162880
(view)https://bugs.python.org/msg162880
msg162882https://bugs.python.org/issue15061#msg162882
(view)https://bugs.python.org/msg162882
msg162885https://bugs.python.org/issue15061#msg162885
(view)https://bugs.python.org/msg162885
msg162888https://bugs.python.org/issue15061#msg162888
(view)https://bugs.python.org/msg162888
f36af3766a20https://hg.python.org/lookup/f36af3766a20
#15061https://bugs.python.org/issue15061
http://hg.python.org/cpython/rev/f36af3766a20http://hg.python.org/cpython/rev/f36af3766a20
msg162891https://bugs.python.org/issue15061#msg162891
(view)https://bugs.python.org/msg162891
msg162892https://bugs.python.org/issue15061#msg162892
(view)https://bugs.python.org/msg162892
msg162893https://bugs.python.org/issue15061#msg162893
(view)https://bugs.python.org/msg162893
msg162895https://bugs.python.org/issue15061#msg162895
(view)https://bugs.python.org/msg162895
msg162899https://bugs.python.org/issue15061#msg162899
(view)https://bugs.python.org/msg162899
https://github.com/facebook/tornado/blob/master/tornado/web.py#L2004https://github.com/facebook/tornado/blob/master/tornado/web.py#L2004
msg162914https://bugs.python.org/issue15061#msg162914
(view)https://bugs.python.org/msg162914
msg162949https://bugs.python.org/issue15061#msg162949
(view)https://bugs.python.org/msg162949
msg162950https://bugs.python.org/issue15061#msg162950
(view)https://bugs.python.org/msg162950
http://www.rootr.net/man/man/timingsafe_bcmp/3http://www.rootr.net/man/man/timingsafe_bcmp/3
ftp://ftp.fr.openbsd.org/pub/OpenBSD/src/lib/libc/string/timingsafe_bcmp.cftp://ftp.fr.openbsd.org/pub/OpenBSD/src/lib/libc/string/timingsafe_bcmp.c
msg163159https://bugs.python.org/issue15061#msg163159
(view)https://bugs.python.org/msg163159
msg163163https://bugs.python.org/issue15061#msg163163
(view)https://bugs.python.org/msg163163
f36af3766a20https://hg.python.org/lookup/f36af3766a20
msg163168https://bugs.python.org/issue15061#msg163168
(view)https://bugs.python.org/msg163168
#14955https://bugs.python.org/issue14955
msg163170https://bugs.python.org/issue15061#msg163170
(view)https://bugs.python.org/msg163170
#14955https://bugs.python.org/issue14955
msg163186https://bugs.python.org/issue15061#msg163186
(view)https://bugs.python.org/msg163186
msg163188https://bugs.python.org/issue15061#msg163188
(view)https://bugs.python.org/msg163188
msg162771https://bugs.python.org/msg162771
msg163192https://bugs.python.org/issue15061#msg163192
(view)https://bugs.python.org/msg163192
msg163193https://bugs.python.org/issue15061#msg163193
(view)https://bugs.python.org/msg163193
msg163196https://bugs.python.org/issue15061#msg163196
(view)https://bugs.python.org/msg163196
http://bugs.python.org/issue15061#msg162893http://bugs.python.org/issue15061#msg162893
msg163204https://bugs.python.org/issue15061#msg163204
(view)https://bugs.python.org/msg163204
msg163329https://bugs.python.org/issue15061#msg163329
(view)https://bugs.python.org/msg163329
msg163333https://bugs.python.org/issue15061#msg163333
(view)https://bugs.python.org/msg163333
http://bpaste.net/show/32123/http://bpaste.net/show/32123/
msg163343https://bugs.python.org/issue15061#msg163343
(view)https://bugs.python.org/msg163343
Objects/stringlib/timingsafe.hhttps://github.com/python/cpython/blob/master/Objects/stringlib/timingsafe.h
msg163347https://bugs.python.org/issue15061#msg163347
(view)https://bugs.python.org/msg163347
Objects/stringlib/timingsafe.hhttps://github.com/python/cpython/blob/master/Objects/stringlib/timingsafe.h
msg163365https://bugs.python.org/issue15061#msg163365
(view)https://bugs.python.org/msg163365
msg163366https://bugs.python.org/issue15061#msg163366
(view)https://bugs.python.org/msg163366
msg163368https://bugs.python.org/issue15061#msg163368
(view)https://bugs.python.org/msg163368
msg163371https://bugs.python.org/issue15061#msg163371
(view)https://bugs.python.org/msg163371
msg163377https://bugs.python.org/issue15061#msg163377
(view)https://bugs.python.org/msg163377
msg163378https://bugs.python.org/issue15061#msg163378
(view)https://bugs.python.org/msg163378
msg163385https://bugs.python.org/issue15061#msg163385
(view)https://bugs.python.org/msg163385
msg163390https://bugs.python.org/issue15061#msg163390
(view)https://bugs.python.org/msg163390
http://pastebin.com/ZAAjSkJhhttp://pastebin.com/ZAAjSkJh
msg163468https://bugs.python.org/issue15061#msg163468
(view)https://bugs.python.org/msg163468
msg163469https://bugs.python.org/issue15061#msg163469
(view)https://bugs.python.org/msg163469
msg163613https://bugs.python.org/issue15061#msg163613
(view)https://bugs.python.org/msg163613
msg163614https://bugs.python.org/issue15061#msg163614
(view)https://bugs.python.org/msg163614
msg163615https://bugs.python.org/issue15061#msg163615
(view)https://bugs.python.org/msg163615
msg162882https://bugs.python.org/msg162882
msg163617https://bugs.python.org/issue15061#msg163617
(view)https://bugs.python.org/msg163617
msg162882https://bugs.python.org/msg162882
msg163619https://bugs.python.org/issue15061#msg163619
(view)https://bugs.python.org/msg163619
msg163623https://bugs.python.org/issue15061#msg163623
(view)https://bugs.python.org/msg163623
msg163625https://bugs.python.org/issue15061#msg163625
(view)https://bugs.python.org/msg163625
msg163626https://bugs.python.org/issue15061#msg163626
(view)https://bugs.python.org/msg163626
msg163627https://bugs.python.org/issue15061#msg163627
(view)https://bugs.python.org/msg163627
msg163630https://bugs.python.org/issue15061#msg163630
(view)https://bugs.python.org/msg163630
http://www.daemonology.net/blog/2009-06-11-cryptographic-right-answers.htmlhttp://www.daemonology.net/blog/2009-06-11-cryptographic-right-answers.html
msg163652https://bugs.python.org/issue15061#msg163652
(view)https://bugs.python.org/msg163652
msg163671https://bugs.python.org/issue15061#msg163671
(view)https://bugs.python.org/msg163671
msg163696https://bugs.python.org/issue15061#msg163696
(view)https://bugs.python.org/msg163696
msg163780https://bugs.python.org/issue15061#msg163780
(view)https://bugs.python.org/msg163780
c82451eeb595https://hg.python.org/lookup/c82451eeb595
#15061https://bugs.python.org/issue15061
http://hg.python.org/cpython/rev/c82451eeb595http://hg.python.org/cpython/rev/c82451eeb595
msg163784https://bugs.python.org/issue15061#msg163784
(view)https://bugs.python.org/msg163784
msg163784https://bugs.python.org/msg163784
msg163780https://bugs.python.org/msg163780
compare_digest_c-2.patchhttps://bugs.python.org/file26120
msg163696https://bugs.python.org/msg163696
gregory.p.smithhttps://bugs.python.org/user252
msg163671https://bugs.python.org/msg163671
compare_digest_c.patchhttps://bugs.python.org/file26112
msg163652https://bugs.python.org/msg163652
msg163630https://bugs.python.org/msg163630
msg163627https://bugs.python.org/msg163627
msg163626https://bugs.python.org/msg163626
msg163625https://bugs.python.org/msg163625
msg163623https://bugs.python.org/msg163623
msg163619https://bugs.python.org/msg163619
msg163617https://bugs.python.org/msg163617
msg163615https://bugs.python.org/msg163615
msg163614https://bugs.python.org/msg163614
timingsafe_cmp-2.patchhttps://bugs.python.org/file26106
msg163613https://bugs.python.org/msg163613
msg163469https://bugs.python.org/msg163469
msg163468https://bugs.python.org/msg163468
msg163390https://bugs.python.org/msg163390
msg163385https://bugs.python.org/msg163385
msg163378https://bugs.python.org/msg163378
timingsafe_cmp.patchhttps://bugs.python.org/file26079
msg163377https://bugs.python.org/msg163377
msg163371https://bugs.python.org/msg163371
msg163368https://bugs.python.org/msg163368
msg163366https://bugs.python.org/msg163366
msg163365https://bugs.python.org/msg163365
msg163347https://bugs.python.org/msg163347
timingsafe.hhttps://bugs.python.org/file26068
msg163343https://bugs.python.org/msg163343
msg163333https://bugs.python.org/msg163333
msg163329https://bugs.python.org/msg163329
georg.brandlhttps://bugs.python.org/user93
msg163204https://bugs.python.org/msg163204
msg163196https://bugs.python.org/msg163196
msg163193https://bugs.python.org/msg163193
msg163192https://bugs.python.org/msg163192
msg163188https://bugs.python.org/msg163188
serhiy.storchakahttps://bugs.python.org/user15623
msg163186https://bugs.python.org/msg163186
alexhttps://bugs.python.org/user9612
msg163170https://bugs.python.org/msg163170
issue14955 dependencieshttps://bugs.python.org/issue14955
msg163168https://bugs.python.org/msg163168
msg163163https://bugs.python.org/msg163163
msg163159https://bugs.python.org/msg163159
msg162950https://bugs.python.org/msg162950
Jon.Oberheidehttps://bugs.python.org/user15788
msg162949https://bugs.python.org/msg162949
msg162914https://bugs.python.org/msg162914
msg162899https://bugs.python.org/msg162899
msg162895https://bugs.python.org/msg162895
msg162893https://bugs.python.org/msg162893
msg162892https://bugs.python.org/msg162892
msg162891https://bugs.python.org/msg162891
python-devhttps://bugs.python.org/user13902
msg162888https://bugs.python.org/msg162888
msg162885https://bugs.python.org/msg162885
msg162882https://bugs.python.org/msg162882
msg162880https://bugs.python.org/msg162880
arigohttps://bugs.python.org/user43
msg162877https://bugs.python.org/msg162877
msg162875https://bugs.python.org/msg162875
petri.lehtinenhttps://bugs.python.org/user14287
msg162873https://bugs.python.org/msg162873
msg162872https://bugs.python.org/msg162872
msg162871https://bugs.python.org/msg162871
msg162868https://bugs.python.org/msg162868
msg162867https://bugs.python.org/msg162867
msg162866https://bugs.python.org/msg162866
msg162865https://bugs.python.org/msg162865
msg162864https://bugs.python.org/msg162864
msg162863https://bugs.python.org/msg162863
msg162862https://bugs.python.org/msg162862
msg162861https://bugs.python.org/msg162861
msg162860https://bugs.python.org/msg162860
msg162859https://bugs.python.org/msg162859
msg162858https://bugs.python.org/msg162858
msg162857https://bugs.python.org/msg162857
msg162856https://bugs.python.org/msg162856
msg162855https://bugs.python.org/msg162855
msg162853https://bugs.python.org/msg162853
msg162852https://bugs.python.org/msg162852
msg162850https://bugs.python.org/msg162850
msg162848https://bugs.python.org/msg162848
msg162847https://bugs.python.org/msg162847
msg162846https://bugs.python.org/msg162846
msg162845https://bugs.python.org/msg162845
ncoghlanhttps://bugs.python.org/user1309
msg162838https://bugs.python.org/msg162838
msg162778https://bugs.python.org/msg162778
msg162777https://bugs.python.org/msg162777
msg162775https://bugs.python.org/msg162775
loewishttps://bugs.python.org/user8
msg162773https://bugs.python.org/msg162773
msg162770https://bugs.python.org/msg162770
msg162769https://bugs.python.org/msg162769
msg162768https://bugs.python.org/msg162768
msg162767https://bugs.python.org/msg162767
msg162766https://bugs.python.org/msg162766
msg162765https://bugs.python.org/msg162765
msg162764https://bugs.python.org/msg162764
pitrouhttps://bugs.python.org/user2040
msg162763https://bugs.python.org/msg162763
msg162762https://bugs.python.org/msg162762
msg162761https://bugs.python.org/msg162761
arigohttps://bugs.python.org/user43
msg162760https://bugs.python.org/msg162760
hynekhttps://bugs.python.org/user14695
msg162759https://bugs.python.org/msg162759
fijallhttps://bugs.python.org/user13220
msg162758https://bugs.python.org/msg162758
The Python Software Foundationhttps://python.org/psf-landing/
Rounduphttp://roundup.sourceforge.net
Python Software Foundationhttp://python.org/psf
Legal Statementshttp://python.org/about/legal
URLs of crawlers that visited me.