Glossary: Web App Security and Authentication

Timing-safe compare

Also written: timingSafeEqual

Comparing secrets in the same time however much matches, so timing can't leak them bit by bit. kc-shop's sameToken uses Node's timingSafeEqual.