{"ref":"refs/heads/master","commits":[{"author":{"name":"Eivind Uggedal","email":"b0887ed45788375b1ea0bd3b939a8fc06a55ecb9@uggedal.com"},"url":"https://api.github.com/repos/uggedal/jasypt/commits/b79dadf9fc854175711494697d13dd04f74c29d5","message":"Fix possible timing attack vectors in comparisons between values.\n\nAdded a constant time compare function[1] and used it\nfor comparison between the encrypted message and the\noriginal digest in StandardByteDigester.\n\nAlso used the constant time compare in the Hibernate\nEncryptedBinaryType and the Spring PBEPasswordEncoder.\n\n[1]: http://codahale.com/a-lesson-in-timing-attacks/","sha":"b79dadf9fc854175711494697d13dd04f74c29d5"}],"head":"b79dadf9fc854175711494697d13dd04f74c29d5","size":1,"push_id":48568720}