You should remember to use constant-time comparison when checking for equality in your stored procedure though; do databases typically provide functions/operato

You should remember to use constant-time comparison when checking for equality in your stored procedure though; do databases typically provide functions/operators for that? It's something just as easy to get wrong in application code, but good frameworks already do, and abstract it away where you might not realise.