hydra/src
Graham Christensen 29620df85e Passwords: check in constant time
The default password comparison logic does not use
constant time validation. Switching to constant time
offers a meager improvement by removing a timing
oracle.

A prepatory step in moving to Argon2id password storage, since we'll need this change anyway after
for validating existing passwords.

Co-authored-by: Graham Christensen <graham@grahamc.com>
2021-04-15 11:34:56 -04:00
..
hydra-eval-jobs hydra-eval-jobs: Fix unexpected EOF when a top-level attr fails 2021-02-22 16:29:07 +01:00
hydra-evaluator hydra-evaluator: clean up names, clean up & / * spacing 2021-01-28 09:15:19 -05:00
hydra-queue-runner Fix build with latest master 2021-04-08 17:11:15 +02:00
lib Passwords: check in constant time 2021-04-15 11:34:56 -04:00
libhydra db.hh: use hasPrefix for prefix comparisons 2021-02-24 07:00:26 -05:00
root Make new jobsets enabled by default in the UI 2021-04-12 12:01:24 -04:00
script hydra-send-stats: add a --once option for testing 2021-03-20 09:16:08 -04:00
sql Fix check in jobsets 2021-02-03 22:14:53 +01:00
ttf Add font for the captcha 2013-03-04 12:16:13 +01:00
Makefile.am Revert "hydra-eval-jobs -> nix eval-hydra-jobs" 2020-02-19 20:36:52 +01:00
Makefile.PL * Move everything up one directory. 2009-03-05 13:41:57 +00:00