timing

Constant Time Comparisons in Rust and Why Equality Is Unsafe

Comparing secrets with == returns at the first difference, which leaks how many bytes matched. Use subtle ConstantTimeEq for tokens and MACs and understand what constant time can and cannot promise.