tree 92a68f8ba28d1f706a5a9654255e3d1071460f56
parent 023d512f3ec8ba6756318032bf74d336a37df5b9
author Klaus Kämpf <kkaempf@suse.de> 1400516858 +0200
committer Klaus Kämpf <kkaempf@suse.de> 1400516858 +0200

Support SHA512 password encoding, use safe_cmp to prevent brute-force
attacks

SHA512 passwords needs more space than 64bytes

The runtime of strcmp depends on the string size, thus allows for
brute-force password attacks. Replace it by constant-time safe_cmp
when comparing usernames and passwords.