kohana/core — pull request #491 by sarciszewski (2014-05-13 01:13:28+00:00)
Title: Add resistance to remote timing attacks

When cryptographic hashes are compared with the `===` operator, they are susceptible to remote timing attacks. This patch affects the cookie-based session driver as well as `Security::check`; you may wish to also patch other hash comparison functions.