Minor fixes and javadocs after review

Set 90 day default for event log
Format clock skew in summary bar
Constant time for password hash check
This commit is contained in:
zzz committed 2017-11-06 23:45:57 +00:00
1 parent e281620063
commit 2b8f14f709
10 files changed
+21 -19

No files matched your search

@@ -119,7 +119,7 @@ public class PasswordManager {
System.arraycopy(shashBytes, 0, salt, 0, SALT_LENGTH);
System.arraycopy(shashBytes, SALT_LENGTH, hash, 0, SessionKey.KEYSIZE_BYTES);
byte[] pwHash = _context.keyGenerator().generateSessionKey(salt, DataHelper.getUTF8(pw)).getData();
return DataHelper.eq(hash, pwHash);
return DataHelper.eqCT(hash, 0, pwHash, 0, SessionKey.KEYSIZE_BYTES);
}
/**