A relatively simple question:
It appears that C# doesn't come with baked-in constant-time comparison methods or extensions, why not? Sure it's a simple algorithm, but it seems so basic it should be included.
It is typically not recommend to write any of your own crypto code, however it appears that there aren't any libraries for this kind of purpose, am I missing some?
See algorithms like this: http://codahale.com/a-lesson-in-timing-attacks/
Since it's being removed as off-topic, I'm moving my answer here: https://blog.roushtech.net/2017/05/25/constant-time-comparisons-net/
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With