shaggy-rl/passhash-auth — pull request #3 by kitcambridge (2013-08-10 01:11:29+00:00)
Title: Use a fixed-time algorithm to compare hashes

Hi Alex! I'm not sure if it's necessary in this case (you're a security wiz, so you probably have a very good reason for using `===` instead of a more elaborate comparison), but I thought it might be helpful to use a fixed-time algorithm to compare the password hash and digest in `checkHashMatch`.