compare-timing-safe

String comparison in length constant time

Works in node and in the browser.

Node version uses crypto module.

timingSafeEqual(a, b)

String, buffer comparison in length-constant time

Example

import timingSafeEqual from 'compare-timing-safe'
const input = 'a'
const compareWith = 'bbbbbbbb'
timingSafeEqual(input, compareWith)
//> false

Parameters

| parameter | type | description | | --------- | -------------- | ------------------------------------ | | a | String, Buffer | String or buffer from input | | b | String, Buffer | String or buffer to compare with a |

Returns Boolean, true if strings match

Installation

Requires nodejs.

$ npm install compare-timing-safe

Tests

$ npm test

License

Unlicense https://unlicense.org

References

• A lesson in timing attacks