zendframework/zf2 — pull request #6621 by dunglas (2014-09-02 06:42:02+00:00)
Title: Use hash_equals for constant-time string comparison

Use the `hash_equals` function (introduced in PHP 5.6) for timing attack safe string comparison when available.
Add in the DocBlock that length will leak (see https://github.com/php/php-src/pull/792).