Plug.Crypto v1.0.0 Plug.Crypto View Source

Namespace and module for crypto-related functionality.

Link to this section Summary

Masks the token on the left with the token on the right

Compares the two binaries (one being masked) in constant-time to avoid timing attacks

Prunes the stacktrace to remove any argument trace

A restricted version of :erlang.binary_to_term/2 that forbids possibly unsafe terms

Compares the two binaries in constant-time to avoid timing attacks

mask(left, right)

mask(binary(), binary()) :: binary()

Masks the token on the left with the token on the right.

Both tokens are required to have the same size.

masked_compare(left, right, mask)

masked_compare(binary(), binary(), binary()) :: boolean()

Compares the two binaries (one being masked) in constant-time to avoid timing attacks.

It is assumed the right token is masked according to the given mask.

prune_args_from_stacktrace(stacktrace)

prune_args_from_stacktrace(Exception.stacktrace()) :: Exception.stacktrace()

Prunes the stacktrace to remove any argument trace.

safe_binary_to_term(binary, opts \\ [])

safe_binary_to_term(binary(), [atom()]) :: term() | {term(), non_neg_integer()}

A restricted version of :erlang.binary_to_term/2 that forbids possibly unsafe terms.

secure_compare(left, right)

secure_compare(binary(), binary()) :: boolean()

Compares the two binaries in constant-time to avoid timing attacks.

See: http://codahale.com/a-lesson-in-timing-attacks/