perl-String-Compare-ConstantTime - Timing side-channel protected string compare
| Website: | https://metacpan.org/release/String-Compare-ConstantTime |
|---|---|
| License: | GPL-1.0-or-later OR Artistic-1.0-Perl |
| Vendor: | Alcance Libre, Inc. |
- Description:
This module provides one function, "equals", which works like perl's "eq", but which does not provide a timing side-channel. Such comparison is useful when matching against a secret string.
Packages
| perl-String-Compare-ConstantTime-0.321-2.aldos.src [14 KiB] |
Changelog
by Joel Barrios (2025-04-11):
- Clean spec file. Fix CVE-2024-13939 (leaking the length of a secret string) (bug #2355705). |