I have a piece of code that is supposed to replace a native (PHP) function that is only available in a future version (newer than the one I can have).
As it is about cryptography/security, I should be 100% sure about it ideally.
I'm not sure where to post on SE, I considered the following:
- SO: I'm not sure but it doesn't feel like the most appropriate.
- SE codereview: It IS code review but not exactly what code review is for, right? Like this one is more about security/crypto.
- I know there is another sub-SE based on security/crypto (which I forgot the name) but I don't think they really are into code reviewing but I might be wrong.
Just so it is dealt with, this is about this snippet: http://php.net/manual/en/function.hash-equals.php#115664 (Which is also length safe, unlike the official one).