comment update

This commit is contained in:
Kyle Spearrin 2017-04-27 12:13:55 -04:00
parent 585a603cf6
commit f6952177ed
1 changed files with 1 additions and 1 deletions

View File

@ -480,7 +480,7 @@ function initCryptoService(constantsService) {
return b64Output ? forge.util.encode64(mac.getBytes()) : mac.getBytes();
}
// Safely compare two MACs in a way that protects against timing attacks.
// Safely compare two MACs in a way that protects against timing attacks (Double HMAC Verification).
// ref: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/february/double-hmac-verification/
function macsEqual(macKey, mac1, mac2) {
var hmac = forge.hmac.create();