crypto::algorithm Namespace Reference

Detailed Description

Miscellaneous cryptographic routines.

Classes
struct	StringsEqualConstTimeComparator
	Performs constant-time string comparison comparator. More...

Functions
bool	AreStringsEqualConstTime (std::string_view str1, std::string_view str2) noexcept

Function Documentation

AreStringsEqualConstTime()

bool crypto::algorithm::AreStringsEqualConstTime ( std::string_view str1, std::string_view str2 )

noexcept

Performs constant-time string comparison if the strings are of equal size

#include <userver/storages/secdist/provider_component.hpp>
#include <userver/storages/secdist/secdist.hpp>
 
#include <userver/crypto/algorithm.hpp>
#include <userver/formats/parse/common_containers.hpp>
#include <userver/utils/algo.hpp>
#include <userver/utils/strong_typedef.hpp>
 
class UserPasswords {
public:
    using Password = utils::NonLoggable<class PasswordTag, std::string>;
 
    UserPasswords(const formats::json::Value& doc)
        : user_passwords_(doc["user-passwords"].As<std::optional<Storage>>()) {}
 
    bool IsMatching(const std::string& user, const Password& password) const {
        if (!user_passwords_.has_value()) {
            throw std::runtime_error(
                "User passwords storage is missing. Field 'user-passwords' was "
                "missing in json."
            );
        }
 
        const auto* ptr = utils::FindOrNullptr(user_passwords_.value(), user);
        return ptr && crypto::algorithm::AreStringsEqualConstTime(ptr->GetUnderlying(), password.GetUnderlying());
    }
 
private:
    using Storage = std::unordered_map<std::string, Password>;
    std::optional<Storage> user_passwords_;
};