[FOLLOWUP][TASK] Compare password hashes in constant time 53/51853/2
authorChristian Futterlieb <christian@futterlieb.ch>
Sat, 25 Feb 2017 13:33:38 +0000 (14:33 +0100)
committerAnja Leichsenring <aleichsenring@ab-softlab.de>
Sun, 26 Feb 2017 20:44:23 +0000 (21:44 +0100)
commit04810ae26a4b0a15abc195454a3e84a8117ce00a
treeb4606275e6b98eb491376a9fceca13b2c22fb2b8
parent653e22f648a8a0f13f92271c5abe7fb895d388c6
[FOLLOWUP][TASK] Compare password hashes in constant time

Apply constant-time comparison to the fallback password checks as well.

Change-Id: I8d2aa6448c95266a45b2862f12f1a5d8259f4f0b
Releases: master
Resolves: #79888
Related: #79795
Reviewed-on: https://review.typo3.org/51853
Tested-by: TYPO3com <no-reply@typo3.com>
Reviewed-by: Christian Kuhn <lolli@schwarzbu.ch>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: Anja Leichsenring <aleichsenring@ab-softlab.de>
Tested-by: Anja Leichsenring <aleichsenring@ab-softlab.de>
typo3/sysext/saltedpasswords/Classes/SaltedPasswordService.php