changed to constant time
@@ -38,6 +38,6 @@ public boolean isValid(PKMACValue value, char[] password, SubjectPublicKeyInfo k
throw new CRMFException("exception encoding mac input: " + e.getMessage(), e);
}
- return Arrays.areEqual(calculator.getMac(), value.getValue().getBytes());
+ return Arrays.constantTimeAreEqual(calculator.getMac(), value.getValue().getBytes());
}
}
\ No newline at end of file
