[Python-Dev] Should secrets include a fallback for hmac.compare_digest? (original) (raw)

Victor Stinner victor.stinner at gmail.com
Fri Apr 15 04:26:31 EDT 2016


It's easy to implement this function (in the native language of your Python implemenation), it's short. I'm not sure that a Python version is really safe.

The secrets module is for Python 3.6, in this version the hmac already "requires" the compare_digest() function no?

Victor -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://mail.python.org/pipermail/python-dev/attachments/20160415/06f7656b/attachment.html>



More information about the Python-Dev mailing list