crypto::algorithm Namespace Reference

Miscellaneous cryptographic routines. More...

Classes
struct	StringsEqualConstTimeComparator
	Performs constant-time string comparison comparator. More...

Functions
bool	AreStringsEqualConstTime (std::string_view str1, std::string_view str2) noexcept

Detailed Description

Miscellaneous cryptographic routines.

Function Documentation

AreStringsEqualConstTime()

bool crypto::algorithm::AreStringsEqualConstTime ( std::string_view  str1, std::string_view  str2  )

noexcept

Performs constant-time string comparison if the strings are of equal size

#include <userver/storages/secdist/provider_component.hpp>
#include <userver/storages/secdist/secdist.hpp>
 
#include <userver/crypto/algorithm.hpp>
#include <userver/formats/parse/common_containers.hpp>
#include <userver/utils/algo.hpp>
#include <userver/utils/strong_typedef.hpp>
 
class UserPasswords {
 public:
  using Password = utils::NonLoggable<class PasswordTag, std::string>;
 
  UserPasswords(const formats::json::Value& doc)
      : user_password_(doc["user-passwords"].As<Storage>()) {}
 
  bool IsMatching(const std::string& user, const Password& password) const {
    const auto* ptr = utils::FindOrNullptr(user_password_, user);
    return ptr && crypto::algorithm::AreStringsEqualConstTime(
                      ptr->GetUnderlying(), password.GetUnderlying());
  }
 
 private:
  using Storage = std::unordered_map<std::string, Password>;
  Storage user_password_;
};