1
0
mirror of https://github.com/golang/go synced 2024-10-04 12:31:21 -06:00
go/src/pkg/crypto
David Symonds 446bfffcd6 crypto/subtle: make ConstantTimeCompare return zero for args of different length.
This is more useful than panicking, since otherwise every caller needs
to do the length check before calling; some will forget, and have a
potential submarine crasher as a result. Other implementations of this
functionality do a length check.

This is backward compatible, except if someone has written code that
relies on this panicking with different length args. However, that was
not the case before Go 1.3 either.

Updates #7304.

LGTM=agl
R=agl, minux, hanwen
CC=golang-codereviews
https://golang.org/cl/118750043
2014-07-22 10:08:23 +10:00
..
aes crypto/aes: fix overrun in assembly encrypt/decrypt 2014-05-09 15:40:55 -04:00
cipher crypto/cipher: fix typo in example comment 2014-07-02 10:46:54 -07:00
des crypto/des: faster permutation. 2013-07-31 22:06:48 +02:00
dsa crypto/(ec)dsa: use Fermat's inversion. 2014-04-08 16:32:48 -07:00
ecdsa crypto/(ec)dsa: use Fermat's inversion. 2014-04-08 16:32:48 -07:00
elliptic crypto/elliptic: add constant-time, P-256 implementation. 2013-06-27 13:31:05 -04:00
hmac crypto/hmac: add tests for Size() and BlockSize() 2013-12-29 20:56:05 +11:00
md5 crypto/md5, crypto/sha1: exclude amd64p32 from generic implementations. 2014-03-08 07:54:41 +11:00
rand all: merge NaCl branch (part 1) 2014-02-25 09:47:42 -05:00
rc4 crypto/rc4: disable assembly implementation for nacl/arm. 2014-07-10 15:15:16 -04:00
rsa crypto/rsa: fix out-of-bound access with short session keys. 2014-07-02 15:28:57 -07:00
sha1 crypto/md5, crypto/sha1: exclude amd64p32 from generic implementations. 2014-03-08 07:54:41 +11:00
sha256 crypto/sha256, crypto/sha512: fix argument size in assembly 2014-05-15 15:34:25 -04:00
sha512 crypto/sha256, crypto/sha512: fix argument size in assembly 2014-05-15 15:34:25 -04:00
subtle crypto/subtle: make ConstantTimeCompare return zero for args of different length. 2014-07-22 10:08:23 +10:00
tls src, misc: applied gofmt -w -s 2014-07-01 10:28:10 -07:00
x509 crypto/x509: skip test on android (no Go tool) 2014-07-08 13:43:02 -04:00
crypto.go crypto: include hash number in panic message. 2013-08-05 14:23:32 -04:00