Skip to content

Instantly share code, notes, and snippets.

Created May 22, 2018 19:46
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
Star You must be signed in to star a gist
What would you like to do?
'use strict'
const crypto = require('crypto')
* Do a constant time string comparison. Always compare the complete strings
* against each other to get a constant time. This method does not short-cut
* if the two string's length differs.
* @param {string} a
* @param {string} b
* @return {boolean}
module.exports = function(a, b) {
const strA = String(a)
const strB = String(b)
const len = Math.max(Buffer.byteLength(strA), Buffer.byteLength(strB))
const bufA = Buffer.alloc(len, 0, 'utf8')
const bufB = Buffer.alloc(len, 0, 'utf8')
return crypto.timingSafeEqual(bufA, bufB)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment