"Jason A. Donenfeld" <Jason@xxxxxxxxx> writes: > Whenever you're comparing two MACs, it's important to do this using > crypto_memneq instead of memcmp. With memcmp, you leak timing information, > which could then be used to iteratively forge a MAC. Do you have any pointers where I could learn more about this? -- Kalle Valo
