method

fixed_length_secure_compare

v6.0.0 - Show latest stable - 0 notes - Class: SecurityUtils

1.0.0
1.1.6
1.2.6
2.0.3
2.1.0
2.2.1
2.3.8
3.0.0
3.0.9
3.1.0
3.2.1
3.2.8
3.2.13
4.0.2
4.1.8
4.2.1
4.2.7
4.2.9
5.0.0.1
5.1.7
5.2.3 (0)
6.0.0 (0)
6.1.3.1 (-38)
6.1.7.7 (0)
7.0.0 (0)
7.1.3.2 (0)
What's this?

fixed_length_secure_compare(a, b) private

Constant time string comparison, for fixed length strings.

The values compared should be of fixed length, such as strings that have already been processed by HMAC. Raises in case of length mismatch.

Show source

# File activesupport/lib/active_support/security_utils.rb, line 11
    def fixed_length_secure_compare(a, b)
      raise ArgumentError, "string length mismatch." unless a.bytesize == b.bytesize

      l = a.unpack "C#{a.bytesize}"

      res = 0
      b.each_byte { |byte| res |= byte ^ l.shift }
      res == 0
    end

fixed_length_secure_compare

Related methods

Flowdock - Team Inbox With Chat for Software Developers