1 Commits

Author	SHA1	Message	Date
Nick Mathewson	9a69c24150	Do not use strcmp() to compare an http authenticator to its expected value ... This fixes a side-channel attack on the (fortunately unused!) BridgePassword option for bridge authorities. Fix for bug 5543; bugfix on 0.2.0.14-alpha.	2012-04-01 00:42:04 -04:00