Skip to content

Equalize crypt() cost when password auth is rejected early - #1116

Merged
ejohnstown merged 1 commit into
wolfSSL:masterfrom
stenslae:pr-timing-oracle
Aug 5, 2026
Merged

Equalize crypt() cost when password auth is rejected early#1116
ejohnstown merged 1 commit into
wolfSSL:masterfrom
stenslae:pr-timing-oracle

Mitigate user enumeration timing oracle using dummy hash cache

eca6900
Select commit
Loading
Failed to load commit list.
Sign in for the full log view
create_matrix
succeeded Aug 4, 2026 in 2s