Comment Comment by chrismcbride The second one is a timing issue. You need to have an equality method that takes an equal amount of time on success or failure.Heres a good read on timing attacks in general: http://codahale.com/a-lesson-in-timing-attacks/ parent chrismcbride 13 years ago
Heres a good read on timing attacks in general: http://codahale.com/a-lesson-in-timing-attacks/