3
92%
master: 92%

Ran 15 Nov 2020 02:23PM UTC

Files 15

Run time 1s

Badge

Embed ▾

Committed 15 Nov 2020 02:21PM UTC coverage: 91.532% (+0.5%) from 91.056%

Job # 306.3

Build Type

push

travis-ci

Committed by

sybrenstuvel

Commit Message

Fix #165: CVE-2020-25658 - Bleichenbacher-style timing oracle

Use as many constant-time comparisons as practical in the
`rsa.pkcs1.decrypt` function.

`cleartext.index(b'\x00', 2)` will still be non-constant-time. The
alternative would be to iterate over all the data byte by byte in
Python, which is several orders of magnitude slower. Given that a
perfect constant-time implementation is very hard or even impossible to
do in Python [1], I chose the more performant option here.

[1]: https://securitypitfalls.wordpress.com/2018/08/03/constant-time-compare-in-python/

Run Details

735 of 803 relevant lines covered (91.53%)

0.92 hits per line

sybrenstuvel / python-rsa / 306 / 3
92%
master: 92%

README BADGES
x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 306.3

sybrenstuvel / python-rsa / 306 / 3 92% master: 92%

README BADGES x

Markdown

Textile

RDoc

HTML

Rst

Source Files on job 306.3

sybrenstuvel / python-rsa / 306 / 3
92%
master: 92%

README BADGES
x