FellowTraveler / Open-Transactions-old

Open-Transactions democratizes financial and monetary actions. You can use it for issuing currencies/stock, paying dividends, creating asset accounts, sending/receiving digital cash, writing/depositing cheques, cashier's cheques, creating basket currencies, trading on markets, scripting custom agreements, recurring payments, escrow, etc. Open-Transactions uses strong crypto. The balances are unchangeable (even by a malicious server.) The receipt history is destructible. The transactions are unforgeable. The cash is unlinkable. The cheques are non-repudiable. Etc.
http://opentransactions.org
407 stars 84 forks source link

Verify constant time for all secret string comparisons #164

Open FellowTraveler opened 11 years ago

FellowTraveler commented 11 years ago

Make sure whenever a critical string comparison is performed on some secret data or during some crypto operation, that the results of the string comparison are return in constant time. (To prevent timing attacks.)