Archived

This repository has been archived on 2018-10-12. You can view files and clone it, but cannot push or open issues or pull requests.

History

Timothy Warren 21e43fa553 Add csrf module		2014-09-24 17:56:53 -04:00
..
benchmark	Add csrf module	2014-09-24 17:56:53 -04:00
test	Add csrf module	2014-09-24 17:56:53 -04:00
.npmignore	Add csrf module	2014-09-24 17:56:53 -04:00
.travis.yml	Add csrf module	2014-09-24 17:56:53 -04:00
README.md	Add csrf module	2014-09-24 17:56:53 -04:00
index.js	Add csrf module	2014-09-24 17:56:53 -04:00
package.json	Add csrf module	2014-09-24 17:56:53 -04:00

README.md

scmp

Safe, constant-time comparison of strings.

Install

npm install scmp

Why?

To minimize vulnerability against timing attacks.

Examples

var scmp = require('scmp');

var hash      = 'e727d1464ae12436e899a726da5b2f11d8381b26';
var givenHash = 'e727e1b80e448a213b392049888111e1779a52db';

if (scmp(hash, givenHash)) {
  console.log('good hash');
} else {
  console.log('bad hash');
}