method

secure_compare

Ruby on Rails latest stable (v6.1.7.7) - 0 notes - Class: ActiveSupport::MessageVerifier

1.0.0
1.1.6
1.2.6
2.0.3
2.1.0
2.2.1
2.3.8 (0)
3.0.0 (0)
3.0.9 (-2)
3.1.0 (0)
3.2.1 (0)
3.2.8 (0)
3.2.13 (0)
4.0.2 (0)
4.1.8 (0)
4.2.1
4.2.7
4.2.9
5.0.0.1
5.1.7
5.2.3
6.0.0
6.1.3.1
6.1.7.7
7.0.0
7.1.3.2
What's this?

Method deprecated or moved

This method is deprecated or moved on the latest stable version. The last existing version (v4.1.8) is shown here.

These similar methods exist in v6.1.7.7:

ActiveSupport::SecurityUtils#secure_compare
ActiveSupport::SecurityUtils#secure_compare

secure_compare(a, b) private

constant-time comparison algorithm to prevent timing attacks

Show source

# File activesupport/lib/active_support/message_verifier.rb, line 58
      def secure_compare(a, b)
        return false unless a.bytesize == b.bytesize

        l = a.unpack "C#{a.bytesize}"

        res = 0
        b.each_byte { |byte| res |= byte ^ l.shift }
        res == 0
      end

secure_compare

Related methods

Method deprecated or moved

Flowdock - Team Inbox With Chat