Important: This documentation covers Yarn 1 (Classic).
For Yarn 2+ docs and migration guide, see yarnpkg.com.

Package detail

secure-compare-native

pongo313MIT1.0.3TypeScript support: included

Constant-time safe comparison using Node.js native crypto.timingSafeEqual

compare, constant-time, safe-compare, secure, secure-compare, time-equivalent-comparison

readme

secure-compare-native

Constant-time safe comparison using Node.js native crypto.timingSafeEqual.

Installation

npm install secure-compare-native

Usage

Strings:

const { secureCompare } = require("secure-compare-native");

secureCompare("abc", "abc"); // true
secureCompare("hello", "abc"); // false

Buffers:

const { secureCompareBuffer } = require("secure-compare-native");

const buff1 = Buffer.from("abc");
const buff2 = Buffer.from("hello");

secureCompareBuffer(buff1, buff1); // true
secureCompareBuffer(buff2, buff1); // false

Performance

  • secureCompare is about twice slower than secure-compare on Node v12.
  • secureCompareBuffer is fast when you compare buffers.

License

MIT.