Function timingSafeCompare

libs/@local/hash-backend-utils/src/crypto.ts:9–14

(a: string, b: string)

 * differ in length (which does leak length information, but not content).
 */
export function timingSafeCompare(a: string, b: string): boolean {
  if (a.length !== b.length) {
    return false;
  }
  return timingSafeEqual(Buffer.from(a, "utf8"), Buffer.from(b, "utf8"));
}