diff options
| author | Darren Tucker <dtucker@cvs.openbsd.org> | 2018-04-13 03:57:27 +0000 |
|---|---|---|
| committer | Darren Tucker <dtucker@cvs.openbsd.org> | 2018-04-13 03:57:27 +0000 |
| commit | 8adbf9e98a5b65138571bedc1198e1eca804ed21 (patch) | |
| tree | b72459ef0606405bd4382033877fad1c79d25bcb /usr.sbin | |
| parent | 24fb6166b97816f05ec45586882e78a881b9ffbd (diff) | |
Defend against user enumeration timing attacks.
This establishes a minimum time for each failed authentication
attempt (5ms) and adds a per-user constant derived from a host
secret (0-4ms). Based on work by joona.kannisto at tut.fi, ok
markus@ djm@.
Diffstat (limited to 'usr.sbin')
0 files changed, 0 insertions, 0 deletions