mloughran/signature — pull request #9 by stevegraham (2014-12-29 02:12:32+00:00)
Title: Perform constant time string comparison when validating signatures

String#== is not safe for the purposes of validating cryptographic
signatures because it enables timing attacks.