NFD » ndn-cxx

Digest<Hash>::operator== uses Block::operator== which uses std::equals which is not a constant-time algorithm.

Digest is often used in security related context, but a non-constant-time Digest<Hash>::operator== is vulnerable to timing attack.

Possible solutions:

• either implement Digest<Hash>::operator== using a constant-time algorithm, see http://codahale.com/a-lesson-in-timing-attacks/
• or add \warning This method cannot be used in security related context because it is vulnerable to timing attack to Doxygen block