Tagged articles

timing attack

2 articles · Page 1 of 1

May 9, 2021 · Backend Development

hash_equals() – Constant‑Time String Comparison to Prevent Timing Attacks

The article explains PHP's hash_equals() function, which performs a constant‑time comparison of two strings to mitigate timing attacks, describes its parameters and return value, and provides example code demonstrating correct and incorrect usage with crypt() hashes.

PHPhash_equalssecurity

0 likes · 2 min read

hash_equals() – Constant‑Time String Comparison to Prevent Timing Attacks

Java Backend Technology

Jul 5, 2020 · Information Security

Why Constant-Time String Comparison Matters: Preventing Timing Attacks

The article explains how constant‑time string comparison functions work, shows Java and Scala implementations, and demonstrates why such techniques are essential to thwart timing attacks in cryptographic and authentication scenarios.

constant-time comparisoncryptographyinformation security

0 likes · 9 min read

Why Constant-Time String Comparison Matters: Preventing Timing Attacks