tsscmp-ruby
This gem provides timing-safe string compare with double HMAC pattern. It is inspired by suryagh's tsscmp library.
Installation
Add this line to your application's Gemfile:
gem 'tsscmp-ruby'
And then execute:
$ bundle
Or install it yourself as:
$ gem install tsscmp-ruby
Usage
require 'tsscmp-ruby'
Tsscmp.compare("a", "a") #=> true
Tsscmp.compare("a", "b") #=> false
Contributing
Bug reports and pull requests are welcome on GitHub at https://github.com/saka1/tsscmp-ruby.
License
The gem is available as open source under the terms of the MIT License.
TODO
- Statistical tests on timing-safe
- Remove dependency to openssl