IcyApril/CryptoLib

validateHash(): use hash_equals() instead of ===

Closed this issue 8 years ago · 1 comments

paragonie-scott commented 9 years ago

https://github.com/IcyApril/CryptoLib/blob/master/src/CryptoLib.php#L233

http://blog.ircmaxell.com/2014/11/its-all-about-time.html

IcyApril commented 8 years ago

So sorry for the slow reply! Accordingly updated: https://github.com/IcyApril/CryptoLib/blob/master/src/CryptoLib.php#L283