I just published string-timing-safe-equal, a small Node package that compares strings in a way that’s resistant to timing attacks and handles Unicode weirdness. It’s basically a version of crypto.timingSafeEqual() that works with strings.
I just published string-timing-safe-equal, a small Node package that compares strings in a way that’s resistant to timing attacks and handles Unicode weirdness. It’s basically a version of crypto.timingSafeEqual() that works with strings.