> Basically you can figure out the hash using the aforementioned timing attack. All popular hashing procedures (sha, argon, etc) to my knowledge produce high d

> Basically you can figure out the hash using the aforementioned timing attack. All popular hashing procedures (sha, argon, etc) to my knowledge produce high difference output for small difference inputs. This means that even with one round of sha128[0] your comparison timings turn very erratic. I won't go as far as saying that they turn random, because somebody will jump on it, but what they do achieve is render timing attacks at least impractical for the next few decades. At least to my own knowledge. [0] please don't use sha128!!!