Timing safe string compare using double HMAC

timing safe equals, but for the browser

TypeScript definitions for timing-safe-equal

JSON Web Token (JWT) encode/decode for Node — zero runtime dependencies, timing-safe verification.

An isomorphic timing-safe equality function for strings and Uint8Arrays.

Kengela hardened native authn: timing-safe credentials, AES-256-GCM encryption, TOTP.

timing safe string compare, using double hmac

String comparison in length constant time

A timing-safe comparison function utilizing the 'Double HMAC validation pattern' with webcrypto, designed to operate in Node.JS, Edge, and Browser environments.

API key validation middleware for MCP servers built with MCP Fusion. Timing-safe comparison, SHA-256 hashing, async validators, and self-healing error responses.

API key validation middleware for MCP servers built with vurb. Timing-safe comparison, SHA-256 hashing, async validators, and self-healing error responses.

Lightweight auth primitives for MiiaJS - AuthProvider interface, AuthGuard factory, HTTP token extractors, timing-safe equality.

crypto.timingSafeEqual, but works with strings

Pairwise X25519+HKDF+AEAD primitives, MessageEnvelope v1 codec, and timing-safe comparison helpers for oxpulse-chat (Phase 1 unified transport).

Defense-in-depth inbound webhook verification: HMAC-SHA256 timing-safe verify, dual-layer path-token + signature, idempotency-key replay protection

IP hashing, encryption, risk scoring, device detection, VPN detection, rate limiting, and timing-safe utilities

Production-grade JWT utilities with complete type safety, timing-safe verification, and error handling without throwing. Fully typed, tested, and optimized for modern TypeScript projects.

> Nodejs, Browser

SSM-based API key authentication with caching and timing-safe comparison for AWS Lambda

Hash, randomBytes, and timing-safe compare for Node.js.