Minor fixes and javadocs after review

Set 90 day default for event log
Format clock skew in summary bar
Constant time for password hash check
This commit is contained in:
zzz
2017-11-06 23:45:57 +00:00
parent e281620063
commit 2b8f14f709
10 changed files with 21 additions and 19 deletions

View File

@ -119,7 +119,7 @@ public class PasswordManager {
System.arraycopy(shashBytes, 0, salt, 0, SALT_LENGTH);
System.arraycopy(shashBytes, SALT_LENGTH, hash, 0, SessionKey.KEYSIZE_BYTES);
byte[] pwHash = _context.keyGenerator().generateSessionKey(salt, DataHelper.getUTF8(pw)).getData();
return DataHelper.eq(hash, pwHash);
return DataHelper.eqCT(hash, 0, pwHash, 0, SessionKey.KEYSIZE_BYTES);
}
/**