News for hackers. Stuff that matters.

A comment on Preventing Timing Attacks on String Comparison with Double HMAC Strategy (2015). Parent comment

Re:Preventing Timing Attacks on String Comparison with Doubl... by justinsteven on Sunday November 21, 2021 @06:06PM (#29300691)
No, `hmac(key=key, message=input) == hmac(key=key, message=secret)` where key is either a static secret key for comparison purposes, or random for each comparison.
[ Parent | on HN ]

There are no comments on this comment yet.