func crypto/subtle.ConstantTimeCompare

30 uses

	crypto/subtle (current package)
		constant_time.go#L21: func ConstantTimeCompare(x, y []byte) int {

	crypto/cipher
		gcm.go#L308: 	if subtle.ConstantTimeCompare(expectedTag[:g.tagSize], tag) != 1 {

	crypto/ecdh
		ecdh.go#L88: 		subtle.ConstantTimeCompare(k.publicKey, xx.publicKey) == 1
		ecdh.go#L159: 		subtle.ConstantTimeCompare(k.privateKey, xx.privateKey) == 1

	crypto/ecdsa
		ecdsa.go#L229: 	return subtle.ConstantTimeCompare(a.Bytes(), b.Bytes()) == 1
		ecdsa.go#L598: 		return subtle.ConstantTimeCompare(k.PublicKey().Bytes(), Q) == 1 &&
		ecdsa.go#L599: 			subtle.ConstantTimeCompare(k.Bytes(), D) == 1

	crypto/ed25519
		ed25519.go#L55: 	return subtle.ConstantTimeCompare(pub, xx) == 1
		ed25519.go#L74: 	return subtle.ConstantTimeCompare(priv, xx) == 1
		ed25519.go#L101: 		return subtle.ConstantTimeCompare(priv, k.Bytes()) == 1
		ed25519.go#L207: 		return subtle.ConstantTimeCompare(privateKey, k.Bytes()) == 1

	crypto/hmac
		hmac.go#L64: 	return subtle.ConstantTimeCompare(mac1, mac2) == 1

	crypto/rsa
		rsa.go#L150: 	return subtle.ConstantTimeCompare(a.Bytes(), b.Bytes()) == 1
		rsa.go#L277: 	return subtle.ConstantTimeCompare(buf, b) == 1

	crypto/tls
		conn.go#L451: 		macAndPaddingGood := subtle.ConstantTimeCompare(localMAC, remoteMAC) & int(paddingGood)
		handshake_client.go#L1005: 		subtle.ConstantTimeCompare(verify, serverFinished.verifyData) != 1 {
		handshake_client_tls13.go#L99: 		if subtle.ConstantTimeCompare(acceptConfirmation, hs.serverHello.random[len(hs.serverHello.random)-8:]) == 1 {
		handshake_client_tls13.go#L274: 			if subtle.ConstantTimeCompare(acceptConfirmation, hs.serverHello.encryptedClientHello) == 1 {
		handshake_server.go#L868: 		subtle.ConstantTimeCompare(verify, clientFinished.verifyData) != 1 {
		ticket.go#L385: 		if subtle.ConstantTimeCompare(macBytes, expected) != 1 {

	github.com/refraction-networking/utls
		conn.go#L455: 		macAndPaddingGood := subtle.ConstantTimeCompare(localMAC, remoteMAC) & int(paddingGood)
		handshake_client.go#L1021: 		subtle.ConstantTimeCompare(verify, serverFinished.verifyData) != 1 {
		handshake_client_tls13.go#L112: 		if subtle.ConstantTimeCompare(acceptConfirmation, hs.serverHello.random[len(hs.serverHello.random)-8:]) == 1 {
		handshake_client_tls13.go#L291: 			if subtle.ConstantTimeCompare(acceptConfirmation, hs.serverHello.encryptedClientHello) == 1 {
		handshake_server.go#L833: 		subtle.ConstantTimeCompare(verify, clientFinished.verifyData) != 1 {
		ticket.go#L380: 		if subtle.ConstantTimeCompare(macBytes, expected) != 1 {

	golang.org/x/crypto/internal/poly1305
		poly1305.go#L38: 	return subtle.ConstantTimeCompare(tmp[:], mac[:]) == 1
		poly1305.go#L98: 	return subtle.ConstantTimeCompare(expected, mac[:]) == 1

	vendor/golang.org/x/crypto/internal/poly1305
		poly1305.go#L38: 	return subtle.ConstantTimeCompare(tmp[:], mac[:]) == 1
		poly1305.go#L98: 	return subtle.ConstantTimeCompare(expected, mac[:]) == 1