method

secure_compare

v3.0.0 - Show latest stable - 0 notes - Class: ActiveSupport::MessageVerifier

1.0.0
1.1.6
1.2.6
2.0.3
2.1.0
2.2.1
2.3.8 (0)
3.0.0 (0)
3.0.9 (-2)
3.1.0 (0)
3.2.1 (0)
3.2.8 (0)
3.2.13 (0)
4.0.2 (0)
4.1.8 (0)
4.2.1
4.2.7
4.2.9
5.0.0.1
5.1.7
5.2.3
6.0.0
6.1.3.1
6.1.7.7
7.0.0
7.1.3.2
7.1.3.4
What's this?

secure_compare(a, b) private

constant-time comparison algorithm to prevent timing attacks

# File activesupport/lib/active_support/message_verifier.rb, line 47
      def secure_compare(a, b)
        return false unless a.bytesize == b.bytesize

        l = a.unpack "C#{a.bytesize}"

        res = 0
        b.each_byte { |byte| res |= byte ^ l.shift }
        res == 0
      end

secure_compare

Related methods