Skip to content

Glossary: System Design Beyond the Basics

Constant-time comparison

Also written: hmac.compare_digest

A comparison that takes the same time whether the first or last character differs, so an attacker can't guess a signature by timing answers.

Where the book teaches it

Related terms

HMACSigned URL