Timing safe string compare using double HMAC

timing safe equals, but for the browser

TypeScript definitions for timing-safe-equal

JSON Web Token (JWT) encode/decode for Node — zero runtime dependencies, timing-safe verification.

An isomorphic timing-safe equality function for strings and Uint8Arrays.

timing safe string compare, using double hmac

Hash, randomBytes, and timing-safe compare for Node.js.

String comparison in length constant time

API key validation middleware for MCP servers built with MCP Fusion. Timing-safe comparison, SHA-256 hashing, async validators, and self-healing error responses.

Lightweight auth primitives for MiiaJS - AuthProvider interface, AuthGuard factory, HTTP token extractors, timing-safe equality.

Pairwise X25519+HKDF+AEAD primitives, XChaCha20-Poly1305, PQXDH hybrid KEM, MessageEnvelope v2 codec (authenticated binding transcript), and timing-safe comparison helpers for oxpulse-chat.

A timing-safe comparison function utilizing the 'Double HMAC validation pattern' with webcrypto, designed to operate in Node.JS, Edge, and Browser environments.

crypto.timingSafeEqual, but works with strings

API key validation middleware for MCP servers built with vurb. Timing-safe comparison, SHA-256 hashing, async validators, and self-healing error responses.

SSM-based API key authentication with caching and timing-safe comparison for AWS Lambda

> Nodejs, Browser

HMAC signature verification for incoming webhooks — timing-safe comparison, timestamp/replay tolerance, provider-agnostic.

The webhook toolkit for both directions — sign & deliver outgoing webhooks with retries, and verify incoming ones (timing-safe, replay-protected) with Stripe / GitHub / Shopify presets. Plus event ids & idempotency. One internal dependency (@lacspace/cryp

Production-grade JWT utilities with complete type safety, timing-safe verification, and error handling without throwing. Fully typed, tested, and optimized for modern TypeScript projects.

HMAC-signed, expiring URLs & tokens over Web Crypto — secure download links, magic-login links, unsubscribe links and one-time-action tokens. Tamper-proof, timing-safe, zero-config. Isomorphic (Node, edge, browser).