diff options
| author |  jesopo | 2019-02-12 11:57:49 +0000 |
|---|---|---|
| committer | jesopo | 2019-02-12 11:57:49 +0000 |
| commit | 9667b8a6e08b57db952162c28a7a079068dfdd04 (patch) | |
| tree | d920411734d2d81dee34341fa9ace8a56c67427b /modules | |
| parent | Use `hmac.compare_digest` to do a constant-time compare (sasl.scram) (diff) | |
| signature | ||
Move constant-time compare function to utils.security
Diffstat (limited to 'modules')
| -rw-r--r-- | modules/sasl/scram.py | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/modules/sasl/scram.py b/modules/sasl/scram.py index 463843e4..487a2091 100644 --- a/modules/sasl/scram.py +++ b/modules/sasl/scram.py @@ -1,4 +1,5 @@ import base64, enum, hashlib, hmac, os, typing +from src import utils # IANA Hash Function Textual Names # https://tools.ietf.org/html/rfc5802#section-4 @@ -101,7 +102,7 @@ class SCRAM(object): server_key = self._hmac(self._salted_password, b"Server Key") server_signature = self._hmac(server_key, self._auth_message) - if self._constant_time_compare(server_signature, verifier): + if utils.security.constant_time_compare(server_signature, verifier): self.state = SCRAMState.Success return True else: |