monero/src/simplewallet
moneromooo-monero 38f6910481
simplewallet: plug a timing leak
As reported by Tramèr et al, timing of refresh requests can be used
to see whether a password was requested (and thus at least one output
received) since this will induce a delay in subsequent calls.
To avoid this, we schedule calls at a given time instead of sleeping
for a set time (which would make delays additive).
To further avoid a scheduled call being during the time in which a
password is prompted, the actual scheduled time is now randomized.
2019-11-02 11:41:41 +00:00
..
CMakeLists.txt Update 2019 copyright 2019-03-05 22:05:34 +01:00
simplewallet.cpp simplewallet: plug a timing leak 2019-11-02 11:41:41 +00:00
simplewallet.h simplewallet: plug a timing leak 2019-11-02 11:41:41 +00:00