48 lines
1.2 KiB
Go
48 lines
1.2 KiB
Go
// Copyright 2009 The Go Authors. All rights reserved.
|
|
// Use of this source code is governed by a BSD-style
|
|
// license that can be found in the LICENSE file.
|
|
|
|
package subtle
|
|
|
|
import (
|
|
"crypto/subtle"
|
|
"math/bits"
|
|
|
|
"sources.truenas.cloud/code/nistec/internal/byteorder"
|
|
)
|
|
|
|
func ConstantTimeCompare(x, y []byte) int {
|
|
return subtle.ConstantTimeCompare(x, y)
|
|
}
|
|
|
|
// ConstantTimeLessOrEqBytes returns 1 if x <= y and 0 otherwise. The comparison
|
|
// is lexigraphical, or big-endian. The time taken is a function of the length of
|
|
// the slices and is independent of the contents. If the lengths of x and y do not
|
|
// match it returns 0 immediately.
|
|
func ConstantTimeLessOrEqBytes(x, y []byte) int {
|
|
if len(x) != len(y) {
|
|
return 0
|
|
}
|
|
|
|
// Do a constant time subtraction chain y - x.
|
|
// If there is no borrow at the end, then x <= y.
|
|
var b uint64
|
|
for len(x) > 8 {
|
|
x0 := byteorder.BEUint64(x[len(x)-8:])
|
|
y0 := byteorder.BEUint64(y[len(y)-8:])
|
|
_, b = bits.Sub64(y0, x0, b)
|
|
x = x[:len(x)-8]
|
|
y = y[:len(y)-8]
|
|
}
|
|
if len(x) > 0 {
|
|
xb := make([]byte, 8)
|
|
yb := make([]byte, 8)
|
|
copy(xb[8-len(x):], x)
|
|
copy(yb[8-len(y):], y)
|
|
x0 := byteorder.BEUint64(xb)
|
|
y0 := byteorder.BEUint64(yb)
|
|
_, b = bits.Sub64(y0, x0, b)
|
|
}
|
|
return int(b ^ 1)
|
|
}
|