Timing safe string compare using double HMAC - View it on GitHub