From 9667b8a6e08b57db952162c28a7a079068dfdd04 Mon Sep 17 00:00:00 2001
From: jesopo
Date: Tue, 12 Feb 2019 11:57:49 +0000
Subject: Move constant-time compare function to utils.security

---
 src/utils/security.py | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

(limited to 'src/utils/security.py')

diff --git a/src/utils/security.py b/src/utils/security.py
index 266a767a..1c8f2cf4 100644
--- a/src/utils/security.py
+++ b/src/utils/security.py
@@ -1,4 +1,4 @@
-import socket, ssl
+import hmac, socket, ssl, typing
 
 def ssl_context(cert: str=None, key: str=None, verify: bool=True
         ) -> ssl.SSLContext:
@@ -21,3 +21,8 @@ def ssl_wrap(sock: socket.socket, cert: str=None, key: str=None,
     context = ssl_context(cert=cert, key=key, verify=verify)
     return context.wrap_socket(sock, server_side=server_side,
         server_hostname=hostname)
+
+def constant_time_compare(
+        a: typing.Union[str, bytes],
+        b: typing.Union[str, bytes]) -> bool:
+    return hmac.compare_digest(a, b)
-- 
cgit v1.3.1-10-gc9f91