{"push_id":1092420838,"size":7,"distinct_size":5,"ref":"refs/heads/topic/fixes","head":"56a03d768b6ddd7bc850c88f042402dcd1218dae","before":"e4af1fce26d5a4427ffa07503260bbc6066a13c1","commits":[{"sha":"41f82737582c866ae5f1ad995d9c9c59fd2c1274","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"Hash an actual credential for verifyNoCredential so the timing is input-dependent","distinct":false,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/41f82737582c866ae5f1ad995d9c9c59fd2c1274"},{"sha":"f412493228f19ce659f883c2c9ad9167dea6da47","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"Merge pull request #20 from ambiata/topic/no-credential\n\nHash an actual credential for verifyNoCredential so the timing is input-dependent","distinct":false,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/f412493228f19ce659f883c2c9ad9167dea6da47"},{"sha":"a4566230625743a79f584f4cde7d660ad7153736","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"Bump mafia","distinct":true,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/a4566230625743a79f584f4cde7d660ad7153736"},{"sha":"7c9ac38a6e4bc0151b9fe5784f96d88b7d628a0b","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"Export datatypes and utility functions from root module","distinct":true,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/7c9ac38a6e4bc0151b9fe5784f96d88b7d628a0b"},{"sha":"d9323bdf56454c5182c06a316d27cb1d3e8c9fc2","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"Export ScryptParams type so clients can define them in one place","distinct":true,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/d9323bdf56454c5182c06a316d27cb1d3e8c9fc2"},{"sha":"ed57f9c961a83e8cee34c2be8e02190f063f79ab","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"Don't generate a salt in verifyNoCredential\n\nThis fixes a timing vulnerability resulting from the nonnegligible\ntime taken to read from /dev/urandom.","distinct":true,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/ed57f9c961a83e8cee34c2be8e02190f063f79ab"},{"sha":"56a03d768b6ddd7bc850c88f042402dcd1218dae","author":{"email":"f4e2cff0138e8cd5600e8ca295bf078683584659@tesser.org","name":"Sharif Olorin"},"message":"deepseq Verify results just to be on the safe side","distinct":true,"url":"https://api.github.com/repos/ambiata/tinfoil/commits/56a03d768b6ddd7bc850c88f042402dcd1218dae"}]}