forked from I2P_Developers/i2p.i2p
Minor fixes and javadocs after review
Set 90 day default for event log Format clock skew in summary bar Constant time for password hash check
This commit is contained in:
@ -119,7 +119,7 @@ public class PasswordManager {
|
||||
System.arraycopy(shashBytes, 0, salt, 0, SALT_LENGTH);
|
||||
System.arraycopy(shashBytes, SALT_LENGTH, hash, 0, SessionKey.KEYSIZE_BYTES);
|
||||
byte[] pwHash = _context.keyGenerator().generateSessionKey(salt, DataHelper.getUTF8(pw)).getData();
|
||||
return DataHelper.eq(hash, pwHash);
|
||||
return DataHelper.eqCT(hash, 0, pwHash, 0, SessionKey.KEYSIZE_BYTES);
|
||||
}
|
||||
|
||||
/**
|
||||
|
Reference in New Issue
Block a user