Skip to content

ramón miklus

Notes from building software.

Latest writing

Constant-Time String Comparison with ^ and |=

Why comparing secrets with === leaks timing information, and how two bitwise operators — XOR and OR-assign — remove the signal entirely.

, 5 min read

all writing