compare-timing-safe

compare-timing-safe

String comparison in length constant time

Works in node and in the browser.

Node version uses crypto module.

timingSafeEqual(a, b)

String, buffer comparison in length-constant time

Example

import timingSafeEqual from 'compare-timing-safe'
const input = 'a'
const compareWith = 'bbbbbbbb'
timingSafeEqual(input, compareWith)
//> false

Parameters

parameter	type	description
a	String, Buffer	String or buffer from input
b	String, Buffer	String or buffer to compare with a

Returns Boolean, true if strings match

Installation

Requires nodejs.

$ npm install compare-timing-safe

Tests

$ npm test

License

Unlicense https://unlicense.org

References

• A lesson in timing attacks