Fix timing attack vulnerability for admin secret #11

TimDaub · 2021-10-25T11:26:24Z

Direct comparisons of strings in node.js should be avoided given that an
attacker could brute force their way to the key, given a timing attack
strategy. The node.js docs recommend using timingSafeEqual from the
crypto standard lib.

fixes #10

Direct comparisons of strings in node.js should be avoided given that an attacker could brute force their way to the key, given a timing attack strategy. The node.js docs recommend using `timingSafeEqual` from the `crypto` standard lib.

Fix timing attack vulnerability for admin secret

9ca3028

Direct comparisons of strings in node.js should be avoided given that an attacker could brute force their way to the key, given a timing attack strategy. The node.js docs recommend using `timingSafeEqual` from the `crypto` standard lib.

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Fix timing attack vulnerability for admin secret #11

Fix timing attack vulnerability for admin secret #11

TimDaub commented Oct 25, 2021

Fix timing attack vulnerability for admin secret #11

Are you sure you want to change the base?

Fix timing attack vulnerability for admin secret #11

Conversation

TimDaub commented Oct 25, 2021