3 Commits

Author	SHA1	Message	Date
Yawning Angel	b8c2b0105b	core/crypto: Disable optimization for the ct byte compare ... Hedge against the possibility of a compiler getting clever enough to optimize this pattern as well.	2023-04-08 10:11:04 +09:00
Yawning Angel	6bafa21bee	crypto: Add rand_bytes ... This adds `rand_bytes(dst: []byte)` which fills the destination buffer with entropy from the cryptographic random number generator. This takes the "simple is best" approach and just directly returns the OS CSPRNG output instead of doing anything fancy (a la OpenBSD's arc4random).	2021-11-17 14:00:00 +00:00
Yawning Angel	d1e76ee4f2	core/crypto: Add constant-time memory comparison routines ... Using a constant-time comparison is required when comparing things like MACs, password digests, and etc to avoid exposing sensitive data via trivial timing attacks. These routines could also live under core:mem, but they are somewhat specialized, and are likely only useful for cryptographic applications.	2021-11-17 13:59:53 +00:00