Mitigate timing attacks while using btcec.Decrypt.

This commit is contained in:
Ishbir Singh 2015-05-25 16:42:43 +05:30
parent 9d6d0e4006
commit d9556df292

View File

@ -178,7 +178,7 @@ func Decrypt(priv *PrivateKey, in []byte) ([]byte, error) {
hm := hmac.New(sha256.New, keyM) hm := hmac.New(sha256.New, keyM)
hm.Write(in[:len(in)-sha256.Size]) // everything is hashed hm.Write(in[:len(in)-sha256.Size]) // everything is hashed
expectedMAC := hm.Sum(nil) expectedMAC := hm.Sum(nil)
if !bytes.Equal(messageMAC, expectedMAC) { if !hmac.Equal(messageMAC, expectedMAC) {
return nil, ErrInvalidMAC return nil, ErrInvalidMAC
} }