Re: Timing attacks against session cookies

Neil Schemenauer <[email protected]> Wed, 4 Aug 2010 10:13:16 -0600

Newsgroups	gmane.comp.web.quixote.user,gmane.comp.python.qp
Message-ID	<[email protected]>

On Mon, Jul 26, 2010 at 11:02:11AM -0400, Binger David wrote:
> Okay, what if the algorithm ensures that some
> fixed amount of time passes for hash lookup failures?

I think that would work or at least make attacks very difficult.

  Neil