Andreas Auernhammer a6318dbdaf fix timing oracle attack against signature V2/V4 verification (#5335)
This change replaces the non-constant time comparison of
request signatures with a constant time implementation. This
prevents a timing attack which can be used to learn a valid 
signature for a request without knowing the secret key.

Fixes #5334
2018-01-02 12:00:02 +05:30
..
2017-03-23 16:36:00 -07:00
2017-03-23 16:36:00 -07:00
2017-03-23 16:36:00 -07:00
2017-03-18 11:28:41 -07:00