[PATCH v2] common/cpt: use timing-safe digest comparison

[Akhil Goyal]

> -----Original Message-----
> From: Rupesh Chiluka <rchiluka at marvell.com>
> Sent: Monday, August 17, 2026 11:00 AM
> To: Rupesh Chiluka <rchiluka at marvell.com>
> Cc: dev at dpdk.org; Akhil Goyal <gakhil at marvell.com>; Tejasree Kondoj
> <ktejasree at marvell.com>; Jerin Jacob <jerinj at marvell.com>;
> stephen at networkplumber.org; Anoob Joseph <anoobj at marvell.com>
> Subject: [PATCH v2] common/cpt: use timing-safe digest comparison
> 
> compl_auth_verify() compared the generated and received MAC with
> memcmp(), which returns early on the first differing byte and leaks
> the number of matching leading bytes through timing.
> 
> Use rte_memeq_timingsafe() for the verify comparison.
> 
> Bugzilla ID: 1773
> 
> Signed-off-by: Rupesh Chiluka <rchiluka at marvell.com>
> ---
Applied to dpdk-next-crypto
Thanks.