{"action":"closed","issue":{"url":"https://api.github.com/repos/RNCryptor/ruby_rncryptor/issues/3","labels_url":"https://api.github.com/repos/RNCryptor/ruby_rncryptor/issues/3/labels{/name}","comments_url":"https://api.github.com/repos/RNCryptor/ruby_rncryptor/issues/3/comments","events_url":"https://api.github.com/repos/RNCryptor/ruby_rncryptor/issues/3/events","html_url":"https://github.com/RNCryptor/ruby_rncryptor/issues/3","id":128450685,"number":3,"title":"Timing Attack Vulnerability","user":{"login":"paragonie-scott","id":11591518,"avatar_url":"https://avatars.githubusercontent.com/u/11591518?v=3","gravatar_id":"","url":"https://api.github.com/users/paragonie-scott","html_url":"https://github.com/paragonie-scott","followers_url":"https://api.github.com/users/paragonie-scott/followers","following_url":"https://api.github.com/users/paragonie-scott/following{/other_user}","gists_url":"https://api.github.com/users/paragonie-scott/gists{/gist_id}","starred_url":"https://api.github.com/users/paragonie-scott/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/paragonie-scott/subscriptions","organizations_url":"https://api.github.com/users/paragonie-scott/orgs","repos_url":"https://api.github.com/users/paragonie-scott/repos","events_url":"https://api.github.com/users/paragonie-scott/events{/privacy}","received_events_url":"https://api.github.com/users/paragonie-scott/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":{"login":"timestretch","id":2541374,"avatar_url":"https://avatars.githubusercontent.com/u/2541374?v=3","gravatar_id":"","url":"https://api.github.com/users/timestretch","html_url":"https://github.com/timestretch","followers_url":"https://api.github.com/users/timestretch/followers","following_url":"https://api.github.com/users/timestretch/following{/other_user}","gists_url":"https://api.github.com/users/timestretch/gists{/gist_id}","starred_url":"https://api.github.com/users/timestretch/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/timestretch/subscriptions","organizations_url":"https://api.github.com/users/timestretch/orgs","repos_url":"https://api.github.com/users/timestretch/repos","events_url":"https://api.github.com/users/timestretch/events{/privacy}","received_events_url":"https://api.github.com/users/timestretch/received_events","type":"User","site_admin":false},"milestone":null,"comments":1,"created_at":"2016-01-25T03:16:10Z","updated_at":"2016-01-27T04:17:31Z","closed_at":"2016-01-27T04:17:31Z","body":"http://www.openwall.com/lists/oss-security/2016/01/24/10\r\n\r\n* https://github.com/RNCryptor/RNCryptor-Spec/blob/04378bc27c604e97353badbead8c435698abe97a/RNCryptor-Spec-v3.md#consistent-time-equality-checking\r\n* https://cryptocoding.net/index.php/Coding_rules#Compare_secret_strings_in_constant_time\r\n* http://blog.ircmaxell.com/2014/11/its-all-about-time.html\r\n\r\nProblematic line: https://github.com/RNCryptor/ruby_rncryptor/blob/5fff939759d04c6e6c73f2cb35fec59e50445912/lib/ruby_rncryptor.rb#L27"}}