crypto::algorithm Namespace Reference

Detailed Description

Miscellaneous cryptographic routines.

Classes
struct	StringsEqualConstTimeComparator
	Performs constant-time string comparison comparator. More...

Functions
bool	AreStringsEqualConstTime (std::string_view str1, std::string_view str2) noexcept

Function Documentation

AreStringsEqualConstTime()

bool crypto::algorithm::AreStringsEqualConstTime ( std::string_view str1, std::string_view str2 )

noexcept

Performs constant-time string comparison if the strings are of equal size

#include <userver/storages/secdist/provider_component.hpp>
#include <userver/storages/secdist/secdist.hpp>
 
#include <userver/crypto/algorithm.hpp>
#include <userver/formats/parse/common_containers.hpp>
#include <userver/utils/algo.hpp>
#include <userver/utils/strong_typedef.hpp>
 
class UserPasswords {
 public:
  using Password = utils::NonLoggable<class PasswordTag, std::string>;
 
  UserPasswords(const formats::json::Value& doc)
      : user_passwords_(doc["user-passwords"].As<std::optional<Storage>>()) {}
 
  bool IsMatching(const std::string& user, const Password& password) const {
    if (!user_passwords_.has_value()) {
      throw std::runtime_error(
          "User passwords storage is missing. Field 'user-passwords' was "
          "missing in json.");
    }
 
    const auto* ptr = utils::FindOrNullptr(user_passwords_.value(), user);
    return ptr && crypto::algorithm::AreStringsEqualConstTime(
                      ptr->GetUnderlying(), password.GetUnderlying());
  }
 
 private:
  using Storage = std::unordered_map<std::string, Password>;
  std::optional<Storage> user_passwords_;
};