i now understand what this does

Chris McDonough

2010-11-06 8c4d7ace88b5bc05b1b770ade86c30f6a6cccc4c

i now understand what this does

 pyramid/session.py

@@ -244,8 +244,8 @@

    sig = hmac.new(secret, pickled, sha1).hexdigest()

    # Avoid timing attacks (note that this is cadged from Pylons and I
    # have no idea what it means)
    # Avoid timing attacks (see
    # http://seb.dbzteam.org/crypto/python-oauth-timing-hmac.pdf)

    if len(sig) != len(input_sig):
        raise ValueError('Wrong signature length')