Comment 8 for bug 1325128

Revision history for this message
Alex Gaynor (alex-gaynor) wrote : Re: nova metadata does not use a constant time compare for validating an HMAC token

PyCA cryptography (cryptography.io) has one, as does Django, and the stdlib has one in 2.7.8+/3.4+ IIRC, probably a bunch of other projects have them too (I know for a fact both keystoneclient and swift do).