func crypto/internal/fips140/subtle.ConstantTimeCompare
18 uses
crypto/internal/fips140/subtle (current package)
constant_time.go#L11: func ConstantTimeCompare(x, y []byte) int {
crypto/internal/fips140/aes/gcm
gcm_asm.go#L127: if subtle.ConstantTimeCompare(expectedTag[:g.tagSize], tag) != 1 {
gcm_generic.go#L37: if subtle.ConstantTimeCompare(expectedTag[:g.tagSize], tag) != 1 {
crypto/internal/fips140/edwards25519/field
fe.go#L255: return subtle.ConstantTimeCompare(sa, sv)
crypto/internal/fips140/mlkem
mlkem1024.go#L271: if subtle.ConstantTimeCompare(K, K1) != 1 {
mlkem1024.go#L433: subtle.ConstantTimeCopy(subtle.ConstantTimeCompare(c[:], c1), Kout, Kprime)
mlkem768.go#L330: if subtle.ConstantTimeCompare(K, K1) != 1 {
mlkem768.go#L492: subtle.ConstantTimeCopy(subtle.ConstantTimeCompare(c[:], c1), Kout, Kprime)
crypto/internal/fips140/nistec/fiat
p224.go#L37: return subtle.ConstantTimeCompare(eBytes, tBytes)
p224.go#L44: return subtle.ConstantTimeCompare(eBytes, zero)
p256.go#L37: return subtle.ConstantTimeCompare(eBytes, tBytes)
p256.go#L44: return subtle.ConstantTimeCompare(eBytes, zero)
p384.go#L37: return subtle.ConstantTimeCompare(eBytes, tBytes)
p384.go#L44: return subtle.ConstantTimeCompare(eBytes, zero)
p521.go#L37: return subtle.ConstantTimeCompare(eBytes, tBytes)
p521.go#L44: return subtle.ConstantTimeCompare(eBytes, zero)
crypto/internal/fips140/rsa
pkcs1v22.go#L448: lHash2Good := subtle.ConstantTimeCompare(lHash, lHash2)
crypto/subtle
constant_time.go#L16: return subtle.ConstantTimeCompare(x, y)