From c13477c14f6d07bc265e656157fb420439fce5c2 Mon Sep 17 00:00:00 2001 From: Ahmed Farid Date: Thu, 4 Aug 2022 12:16:06 +0100 Subject: [PATCH] Update and rename TimingAttack.qhelp to TimingAttackAgainstSensitiveInfo.qhelp --- ...ck.qhelp => TimingAttackAgainstSensitiveInfo.qhelp} | 10 +++------- 1 file changed, 3 insertions(+), 7 deletions(-) rename python/ql/src/experimental/Security/CWE-208/{TimingAttack.qhelp => TimingAttackAgainstSensitiveInfo.qhelp} (91%) diff --git a/python/ql/src/experimental/Security/CWE-208/TimingAttack.qhelp b/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.qhelp similarity index 91% rename from python/ql/src/experimental/Security/CWE-208/TimingAttack.qhelp rename to python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.qhelp index f684894a8ce..683af727470 100644 --- a/python/ql/src/experimental/Security/CWE-208/TimingAttack.qhelp +++ b/python/ql/src/experimental/Security/CWE-208/TimingAttackAgainstSensitiveInfo.qhelp @@ -29,12 +29,12 @@ and does not depend on the contents of the arrays.

The following example uses == which is a fail fast check for validating a secret.

- +

The next example use a safe constant-time algorithm for validating a secret:

- + @@ -46,11 +46,7 @@ and does not depend on the contents of the arrays.
  • hmac.compare_digest() method
  • - -
  • - HMAC: - RFC 2104 -
  • +