> -----Original Message----- > From: Rupesh Chiluka <[email protected]> > Sent: Monday, August 17, 2026 11:00 AM > To: Rupesh Chiluka <[email protected]> > Cc: [email protected]; Akhil Goyal <[email protected]>; Tejasree Kondoj > <[email protected]>; Jerin Jacob <[email protected]>; > [email protected]; Anoob Joseph <[email protected]> > Subject: [PATCH v2] common/cpt: use timing-safe digest comparison > > compl_auth_verify() compared the generated and received MAC with > memcmp(), which returns early on the first differing byte and leaks > the number of matching leading bytes through timing. > > Use rte_memeq_timingsafe() for the verify comparison. > > Bugzilla ID: 1773 > > Signed-off-by: Rupesh Chiluka <[email protected]> > --- Applied to dpdk-next-crypto Thanks.
