Browse Source

* Prevent timing attack, patch by Thaddy De Koning

git-svn-id: trunk@32794 -
michael 9 years ago
parent
commit
d93babffde
1 changed files with 3 additions and 0 deletions
  1. 3 0
      packages/hash/src/sha1.pp

+ 3 - 0
packages/hash/src/sha1.pp

@@ -313,7 +313,10 @@ var
   A: array[0..4] of Cardinal absolute Digest1;
   B: array[0..4] of Cardinal absolute Digest2;
 begin
+{$push}
+{$B+}
   Result := (A[0] = B[0]) and (A[1] = B[1]) and (A[2] = B[2]) and (A[3] = B[3]) and (A[4] = B[4]);
+{$pop}
 end;
 
 end.