curl/lib/vtls
Daniel Stenberg ed5095ed94
strcase: add and use Curl_timestrcmp
This is a strcmp() alternative function for comparing "secrets",
designed to take the same time no matter the content to not leak
match/non-match info to observers based on how fast it is.

The time this function takes is only a function of the shortest input
string.

Reported-by: Trail of Bits

Closes #9658
2022-10-08 11:50:47 +02:00
..
bearssl.c bearssl: make it proper C89 compliant 2022-09-23 08:27:50 +02:00
bearssl.h
gskit.c
gskit.h
gtls.c http, vauth: always provide Curl_allow_auth_to_host() functionality 2022-09-27 14:05:37 +02:00
gtls.h
hostcheck.c
hostcheck.h
keylog.c lib and tests: add missing curl.h includes 2022-09-12 09:41:47 +02:00
keylog.h
mbedtls_threadlock.c
mbedtls_threadlock.h
mbedtls.c NPN: remove support for and use of 2022-09-05 07:39:02 +02:00
mbedtls.h
nss.c misc: ISSPACE() => ISBLANK() 2022-09-06 08:34:30 +02:00
nssg.h
openssl.c http, vauth: always provide Curl_allow_auth_to_host() functionality 2022-09-27 14:05:37 +02:00
openssl.h openssl: make certinfo available for QUIC 2022-09-27 14:02:27 +02:00
rustls.c NPN: remove support for and use of 2022-09-05 07:39:02 +02:00
rustls.h
schannel_verify.c
schannel.c docs: spelling nits 2022-09-29 21:29:04 +00:00
schannel.h schannel: ban server ALPN change during recv renegotiation 2022-09-26 03:26:49 -04:00
sectransp.c NPN: remove support for and use of 2022-09-05 07:39:02 +02:00
sectransp.h
vtls.c strcase: add and use Curl_timestrcmp 2022-10-08 11:50:47 +02:00
vtls.h
wolfssl.c wolfSSL: fix session management bug. 2022-09-13 10:15:40 +02:00
wolfssl.h
x509asn1.c ctype: remove all use of <ctype.h>, use our own versions 2022-09-06 08:32:36 +02:00
x509asn1.h