search

bcmyers / argonautica

Idiomatic argon2 password hashing for several languages
Apache License 2.0
146 stars 29 forks source link

Compare hashes in constant time #32

Open Lireer opened 4 years ago

Lireer commented 4 years ago

This should fix #19 by using the constant_time_eq crate to compare hashes. I also tried to make verify more readable by moving duplicated code out of the match arms.

The changes in #31 were used to benchmark both commits. No regressions were found.