3 ms·

I get that it's just supposed to be illustrative, but the "verify_request()" function presented is cryptographically unsound because the == comparison is not co

I get that it's just supposed to be illustrative, but the "verify_request()" function presented is cryptographically unsound because the == comparison is not constant-time.

bvrmn 1y ago
It's a "wisdom of the crowd" and mantra to follow established crypto standards.