double-hmac

Compare two Buffers using Double HMAC to protect against timing attacks

Install

npm install double-hmac

Usage

Note that this module only accepts Buffers.

const assert = require('assert')
 
const compare = require('double-hmac')
 
const a = Buffer.from('some string')
const b = Buffer.from('some other string')
const c = Buffer.from('some string')
 
compare(a, b, (err, equal) => {
  assert.ifError(err)
  assert.notOk(equal)
})
 
compare(a, c, (err, equal) => {
  assert.ifError(err)
  assert.notOk(equal)
})
 

API

doubleHmac(a, b, cb)

a

Type: Buffer

b

Type: Buffer

cb

Type: Function

Standard Node.js callback with arguments (err, equal), equal being Boolean

Security Notes

TODO

License

ISC