1 result · Clear filters · Feed
-
Low 3.7
free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedu…