tree 2c6986c6a07d002bdbed888a6e47777a9a6819b5
parent 5cef9db41207acbe29b6d265c5ecd08acce2941a
author Josh Bleecher Snyder <josharian@gmail.com> 1745368455 -0700
committer Josh Bleecher Snyder <josharian@gmail.com> 1745368455 -0700

dockerimg: clean up password matching code

Minor fixes:

* use crypto/rand.Text instead of hand-rolling one
* avoid converting the password during checking, that's not constant time
* don't use constant time comparisons against a constant string, there's no point