Modules / Standard library

std/constant_time

Constant-time equality for caller-owned byte spans. The length check is intentionally explicit; callers protecting secret tags should use fixed-size buffers so unequal lengths do not become an oracle.

Stable Shipped in release v0.4.2.

Import with #import "std/constant_time".

ConstantTimeEqual :: (left: []u8, right: []u8) -> bool

ConstantTimeTextEqual :: (left: string, right: string) -> bool

Text carries arbitrary bytes without a mutable borrowed view. Compare every byte of equal-length tags just as for caller-owned byte spans.

Source ↗ · All modules