Mehdi Abaakouk 8b4e4987a5 Use hmac.compare_digest to compare signature
hmac.compare_digest must be used to compare sample
signature to avoid timing-attack.

We also provide a best-effort version of hmac.compare_digest
for python version that doesn't have the C version.

Closes bug #1332390

Change-Id: Ia313c98b7cccf0e8aed4fb933292bd7e6141b801
2014-07-17 06:13:53 +00:00
..
2013-11-13 15:32:31 +01:00