Closed tmaher closed 11 years ago
Per review w/@ygluck, during verification, check timestamp prior to HMAC to minimize timing attack potential. Also be more specific about padding algorithm.
Per review w/@ygluck, during verification, check timestamp prior to HMAC to minimize timing attack potential. Also be more specific about padding algorithm.