From f6952177ed8897fb40baf2e6b1cbd9c5011e2792 Mon Sep 17 00:00:00 2001 From: Kyle Spearrin Date: Thu, 27 Apr 2017 12:13:55 -0400 Subject: [PATCH] comment update --- src/services/cryptoService.js | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/services/cryptoService.js b/src/services/cryptoService.js index e0db896a..4c56dabd 100644 --- a/src/services/cryptoService.js +++ b/src/services/cryptoService.js @@ -480,7 +480,7 @@ function initCryptoService(constantsService) { return b64Output ? forge.util.encode64(mac.getBytes()) : mac.getBytes(); } - // Safely compare two MACs in a way that protects against timing attacks. + // Safely compare two MACs in a way that protects against timing attacks (Double HMAC Verification). // ref: https://www.nccgroup.trust/us/about-us/newsroom-and-events/blog/2011/february/double-hmac-verification/ function macsEqual(macKey, mac1, mac2) { var hmac = forge.hmac.create();