You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add as a config option the ability to set constant time.
Some operations (e.g. encryption/decryption) require processing the entire contents of the input before throwing exception in order to mitigate timing attacks.
As module :library:encoding-core does not have knowledge of the higher level implementation details, this will need to be something added to them individually.
When an EncoderDecoder is configured for constant time and encounters an unrecognized input, it should substitute that unknown input so operations continue (e.g. character TABLE[0]) and set an error flag.
When Feed.doFinalProtected is invoked, it should process the remaining contents in its buffer, and then throw an exception.
invoking flush() should not produce an exception, only upon after Feed.doFinal is invoked. Implementations can check isClosed within their doFinalProtected function to check whether flush or doFinal has been invoked.
The text was updated successfully, but these errors were encountered:
Add as a config option the ability to set constant time.
Some operations (e.g. encryption/decryption) require processing the entire contents of the input before throwing exception in order to mitigate timing attacks.
As module
:library:encoding-core
does not have knowledge of the higher level implementation details, this will need to be something added to them individually.EncoderDecoder
is configured for constant time and encounters an unrecognized input, it should substitute that unknown input so operations continue (e.g. characterTABLE[0]
) and set an error flag.Feed.doFinalProtected
is invoked, it should process the remaining contents in its buffer, and then throw an exception.flush()
should not produce an exception, only upon afterFeed.doFinal
is invoked. Implementations can checkisClosed
within theirdoFinalProtected
function to check whetherflush
ordoFinal
has been invoked.The text was updated successfully, but these errors were encountered: