|
if not client_proof == valid_proof.digest(): |
Python docs for hashlib imply vulnerabilities in comparing hashes with the == operator, and instead recommend using a compare_digest() method. In doc context, it is referring to HMAC messages, so it may not apply here but is worth investigating further.
laika-weblogs/laika/modules/weblogs.py
Line 316 in 1dca91d
Python docs for hashlib imply vulnerabilities in comparing hashes with the
==operator, and instead recommend using acompare_digest()method. In doc context, it is referring to HMAC messages, so it may not apply here but is worth investigating further.