func crypto/subtle.ConstantTimeCompare

28 uses

	crypto/subtle (current package)
		constant_time.go#L13: func ConstantTimeCompare(x, y []byte) int {

	crypto/aes
		aes_gcm.go#L178: 	if subtle.ConstantTimeCompare(expectedTag[:g.tagSize], tag) != 1 {

	crypto/cipher
		gcm.go#L232: 	if subtle.ConstantTimeCompare(expectedTag[:g.tagSize], tag) != 1 {

	crypto/ecdh
		ecdh.go#L95: 		subtle.ConstantTimeCompare(k.publicKey, xx.publicKey) == 1
		ecdh.go#L154: 		subtle.ConstantTimeCompare(k.privateKey, xx.privateKey) == 1

	crypto/ecdsa
		ecdsa.go#L139: 	return subtle.ConstantTimeCompare(a.Bytes(), b.Bytes()) == 1

	crypto/ed25519
		ed25519.go#L50: 	return subtle.ConstantTimeCompare(pub, xx) == 1
		ed25519.go#L69: 	return subtle.ConstantTimeCompare(priv, xx) == 1

	crypto/hmac
		hmac.go#L179: 	return subtle.ConstantTimeCompare(mac1, mac2) == 1

	crypto/internal/edwards25519/field
		fe.go#L254: 	return subtle.ConstantTimeCompare(sa, sv)

	crypto/internal/nistec/fiat
		p224.go#L37: 	return subtle.ConstantTimeCompare(eBytes, tBytes)
		p224.go#L44: 	return subtle.ConstantTimeCompare(eBytes, zero)
		p256.go#L37: 	return subtle.ConstantTimeCompare(eBytes, tBytes)
		p256.go#L44: 	return subtle.ConstantTimeCompare(eBytes, zero)
		p384.go#L37: 	return subtle.ConstantTimeCompare(eBytes, tBytes)
		p384.go#L44: 	return subtle.ConstantTimeCompare(eBytes, zero)
		p521.go#L37: 	return subtle.ConstantTimeCompare(eBytes, tBytes)
		p521.go#L44: 	return subtle.ConstantTimeCompare(eBytes, zero)

	crypto/rsa
		pkcs1v15.go#L362: 	ok &= subtle.ConstantTimeCompare(em[k-hashLen:k], hashed)
		pkcs1v15.go#L363: 	ok &= subtle.ConstantTimeCompare(em[k-tLen:k-hashLen], prefix)
		rsa.go#L149: 	return subtle.ConstantTimeCompare(a.Bytes(), b.Bytes()) == 1
		rsa.go#L757: 	lHash2Good := subtle.ConstantTimeCompare(lHash, lHash2)

	crypto/tls
		conn.go#L450: 		macAndPaddingGood := subtle.ConstantTimeCompare(localMAC, remoteMAC) & int(paddingGood)
		handshake_client.go#L865: 		subtle.ConstantTimeCompare(verify, serverFinished.verifyData) != 1 {
		handshake_server.go#L784: 		subtle.ConstantTimeCompare(verify, clientFinished.verifyData) != 1 {
		ticket.go#L379: 		if subtle.ConstantTimeCompare(macBytes, expected) != 1 {

	vendor/golang.org/x/crypto/internal/poly1305
		poly1305.go#L38: 	return subtle.ConstantTimeCompare(tmp[:], mac[:]) == 1
		poly1305.go#L98: 	return subtle.ConstantTimeCompare(expected, mac[:]) == 1