Flowdock
method

secure_compare

Importance_1
v6.1.3.1 - Show latest stable - 0 notes - Class: SecurityUtils
secure_compare(a, b) public

Secure string comparison for strings of variable length.

While a timing attack would not be able to discern the content of a secret compared via secure_compare, it is possible to determine the secret length. This should be considered when using secure_compare to compare weak, short secrets to user input.

Show source
Register or log in to add new notes.