diff options
| author | David Disseldorp <ddiss@suse.de> | 2026-06-05 22:16:48 +1000 |
|---|---|---|
| committer | Martin K. Petersen <martin.petersen@oracle.com> | 2026-06-08 17:20:33 -0400 |
| commit | cf14fc2be868840c4c9e0e46a472995798b59712 (patch) | |
| tree | ea450a0af7299149a9c1e0ffac73c9c5cf81f8a5 /scripts/dummy-tools/python3 | |
| parent | 7e161211f1dd5288b4ea802b30e70ef919ebc3da (diff) | |
scsi: target: Use constant-time crypto_memneq() for CHAP digests
A constant-time memory comparison is more suitable than plain memcmp()
for authentication digest comparison. CHAP digests use an
authenticator-provided random challenge, so any timing side-channel
shouldn't be easily exploitable.
Reported-by: Sashiko (gemini/gemini-3.1-pro-preview)
Link: https://sashiko.dev/#/patchset/20260521151121.808477-1-hossu.alexandru%40gmail.com
Signed-off-by: David Disseldorp <ddiss@suse.de>
Reviewed-by: Lee Duncan <lduncan@suse.com>
Link: https://patch.msgid.link/20260605122019.24146-3-ddiss@suse.de
Signed-off-by: Martin K. Petersen <martin.petersen@oracle.com>
Diffstat (limited to 'scripts/dummy-tools/python3')
0 files changed, 0 insertions, 0 deletions