method

fixed_length_secure_compare

v5.2.3 - Show latest stable - Class: ActiveSupport::SecurityUtils

fixed_length_secure_compare(a, b)

private

Constant time string comparison, for fixed length strings.

The values compared should be of fixed length, such as strings that have already been processed by HMAC. Raises in case of length mismatch.

# File activesupport/lib/active_support/security_utils.rb, line 11
    def fixed_length_secure_compare(a, b)
      raise ArgumentError, "string length mismatch." unless a.bytesize == b.bytesize

      l = a.unpack "C#{a.bytesize}"

      res = 0
      b.each_byte { |byte| res |= byte ^ l.shift }
      res == 0
    end

fixed_length_secure_compare

Related methods