rest := db[hash.Size():] for i := 0; i < len(rest); i++ { equals0 := subtle.ConstantTimeByteEq(rest[i], 0) equals1 := subtle.ConstantTimeByteEq(rest[i], 1) index = subtle.ConstantTimeSelect(lookingForIndex&equals1, i, index) lookingForIndex = subtle.ConstantTimeSelect(equals1, 0, lookingForIndex) invalid = subtle.ConstantTimeSelect(lookingForIndex&^equals0, 1, invalid) } if firstByteIsZero&lHash2Good&^invalid&^lookingForIndex != 1 { return nil, ErrDecryption } return rest[index+1:], nil } golang.o...

pkg crypto/subtle, func ConstantTimeCompare([]uint8, []uint8) int
pkg crypto/subtle, func ConstantTimeCopy(int, []uint8, []uint8)
pkg crypto/subtle, func ConstantTimeEq(int32, int32) int
pkg crypto/subtle, func ConstantTimeSelect(int, int, int) int
pkg crypto/tls, const NoClientCert ClientAuthType
pkg crypto/tls, const RequestClientCert ClientAuthType
pkg crypto/tls, const RequireAndVerifyClientCert ClientAuthType