News for hackers. Stuff that matters.

A comment on A Lesson In Timing Attacks (or, Don't use MessageDigest.isEquals). Parent comment

Re:A Lesson In Timing Attacks (or, Don't use MessageDigest.i... by naz on Thursday August 13, 2009 @12:56PM (#761190)
That makes sense, maybe sleep(rand(1.0 - time_spent))
[ Parent | on HN ]
Re:A Lesson In Timing Attacks (or, Don't use MessageDigest.i... by naz on Thursday August 13, 2009 @12:57PM (#761192)
Or just sleep(1.0 - time_spent)
[ Parent | on HN ]
Re:A Lesson In Timing Attacks (or, Don't use MessageDigest.i... by JacobK on Thursday August 13, 2009 @07:06PM (#761953)
Or just don't short circuit ever, and do the entire computation every time.
[ Parent | on HN ]