• Type: Enhancement\Feature Request
• Priority: Minor

With the focus on creating the MD / HMAC it is easy to forget that before further processing a received packet one should check the MD / HMAC first, and that this check should be done in a constant-time manner. This in order not to reveil any partial correctness of the MD / HMAC, therefore a simple memcmp() won't do. It would be nice if mbedtls, besides helping to generate the MD / HMAC, provides a safe way to check the MD / HMAC on a received packet.