Subject: Re: [quicwg/base-drafts] Why does stateless reset have to be checked after MAC failure (#2152)

From: ekr <[email-masked]>
Date: Sun, 29 Sep 2019 17:17:23 -0700

I don't think that the text here resolves the issue. I agree that you need to have a constant time comparison, but I don't believe it needs to post-date the MAC check, because the attacker knows that there is an invalid MAC. I don't object to landing the PR, but it doesn't resolve this issue.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/quicwg/base-drafts/issues/2152#issuecomment-536356155