curl/lib/vauth
Daniel Stenberg ed5095ed94
strcase: add and use Curl_timestrcmp
This is a strcmp() alternative function for comparing "secrets",
designed to take the same time no matter the content to not leak
match/non-match info to observers based on how fast it is.

The time this function takes is only a function of the shortest input
string.

Reported-by: Trail of Bits

Closes #9658
2022-10-08 11:50:47 +02:00
..
cleartext.c
cram.c
digest_sspi.c strcase: add and use Curl_timestrcmp 2022-10-08 11:50:47 +02:00
digest.c misc: null-terminate 2022-09-17 23:19:29 +02:00
digest.h
gsasl.c functypes: provide the recv and send arg and return types 2022-09-28 09:06:11 +02:00
krb5_gssapi.c
krb5_sspi.c
ntlm_sspi.c
ntlm.c docs: update sourceforge project links [ci skip] 2022-10-01 18:40:47 +00:00
ntlm.h vauth/ntlm.h: make line shorter than 80 columns 2022-10-02 00:21:18 +02:00
oauth2.c
spnego_gssapi.c
spnego_sspi.c
vauth.c http, vauth: always provide Curl_allow_auth_to_host() functionality 2022-09-27 14:05:37 +02:00
vauth.h http, vauth: always provide Curl_allow_auth_to_host() functionality 2022-09-27 14:05:37 +02:00