A Lesson In Timing Attacks (or, Don't use MessageDigest.isEquals)

113 points by codahale

Read the article

Discussion on Hacker News