memcmp: Introduce and use consttime_memeq

[secnet.git] / transform.c

diff --git a/transform.c b/transform.c
index 289b02e57e899611d0fc96880dfad435b36fc5be..012f6186a5072516b3069a70f40c658a4c2adfd7 100644 (file)
--- a/transform.c
+++ b/transform.c
@@ -220,7 +220,7 @@ static uint32_t transform_reverse(void *sst, struct buffer_if *buf,
        serpent_encrypt(&ti->mackey,macplain,macacc);
     }
     serpent_encrypt(&ti->mackey,macacc,macacc);
-    if (memcmp(macexpected,macacc,16)!=0) {
+    if (!consttime_memeq(macexpected,macacc,16)!=0) {
        *errmsg="invalid MAC";
        return 1;
     }