그런 다음 `secrets.compare_digest()`를 사용해 `credentials.username`이 `"stanleyjobson"`이고 `credentials.password`가 `"swordfish"`인지 확실히 확인할 수 있습니다.

{* ../../docs_src/security/tutorial007_an_py310.py hl[1,12:24] *}

이는 다음과 비슷합니다:

```Python
if not (credentials.username == "stanleyjobson") or not (credentials.password == "swordfish"):
    # 어떤 오류를 반환
    ...
```

        System.arraycopy(testData, 0, buffer, bufferIndex + 16, testData.length);

        // Decode
        int bytesDecoded = response.decode(buffer, bufferIndex, 24);

        // Verify results
        assertEquals(namedPipeState, response.getNamedPipeState());
        assertEquals(readDataAvailable, response.getReadDataAvailable());

然后我们可以使用 `secrets.compare_digest()` 来确保 `credentials.username` 是 `"stanleyjobson"`，且 `credentials.password` 是`"swordfish"`。

{* ../../docs_src/security/tutorial007_an_py310.py hl[1,12:24] *}

这类似于：

```Python
if not (credentials.username == "stanleyjobson") or not (credentials.password == "swordfish"):
    # Return some error
    ...
```

但使用 `secrets.compare_digest()`，可以防御**时差攻击**，更加安全。

		23: {
			IsTruncated: false,
			Objects: []ObjectInfo{
				{Name: "Asia/India/India-summer-photos-1"},
				{Name: "Asia/India/Karnataka/Bangalore/Koramangala/pics"},
			},
		},

		// ListObjectsResult-24.
		// Prefix is set to "Asia" in the testCase, and delimiter is not set (testCase 56).
		24: {
			IsTruncated: false,
			Objects: []ObjectInfo{
				{Name: "Asia-maps.png"},

    /** Age of the cached response. */
    private var ageSeconds = -1

    /**
     * Returns true if computeFreshnessLifetime used a heuristic. If we used a heuristic to serve a
     * cached response older than 24 hours, we are required to attach a warning.
     */
    private fun isFreshnessLifetimeHeuristic(): Boolean = cacheResponse!!.cacheControl.maxAgeSeconds == -1 && expires == null

    init {
      if (cacheResponse != null) {

        SMBUtil.writeInt2(4, dst, dstIndex); // NameLength
        dstIndex += 2;

        SMBUtil.writeInt2(0, dst, dstIndex); // Reserved
        dstIndex += 2;

        SMBUtil.writeInt2(24, dst, dstIndex); // DataOffset (from start of context)
        dstIndex += 2;

        SMBUtil.writeInt4(32, dst, dstIndex); // DataLength
        dstIndex += 4;

        // Write context name

4073700,I,QN17,Forest Hills,4108,2054,645,4,Queens,064500,4064500,I,QN17,Forest Hills,4108^3389391,2,2014-03-10 04:24:55,2014-03-10 04:39:00,N,1,-73.844253540039062,40.720935821533203,-73.780479431152344,40.683425903320312,5,6.20,19.5,0.5,0.5,4,0,,,24.5,1,1,95,10,green,0.00,1.2,0.0,51,36,5.37,1293,737,4,Queens,073700,4073700,I,QN17,Forest Hills,4108,839,284,4,Queens,028400,4028400,I,QN76,Baisley Park,4112^3389392,2,2014-03-18 19:11:04,2014-03-18 19:21:46,N,1,-73.844245910644531,40.72094345092773...

        writeInt4(buffer, dataOffset + 16, leaseState);  // LeaseState
        writeInt4(buffer, dataOffset + 20, leaseFlags);  // LeaseFlags
        writeInt8(buffer, dataOffset + 24, leaseDuration);  // LeaseDuration
        
        if (isV2()) {
            System.arraycopy(parentLeaseKey.getKey(), 0, buffer, dataOffset + 32, 16);  // ParentLeaseKey

接著我們可以使用 `secrets.compare_digest()` 來確認 `credentials.username` 等於 `"stanleyjobson"`，而 `credentials.password` 等於 `"swordfish"`。

{* ../../docs_src/security/tutorial007_an_py310.py hl[1,12:24] *}

這大致等同於：

```Python
if not (credentials.username == "stanleyjobson") or not (credentials.password == "swordfish"):
    # 回傳錯誤
    ...
```

但藉由使用 `secrets.compare_digest()`，可以防禦一種稱為「計時攻擊」的攻擊。

        dnsDomainInfo.dns_forest = new rpc.unicode_string();
        dnsDomainInfo.dns_forest.length = 12;
        dnsDomainInfo.dns_forest.maximum_length = 24;
        dnsDomainInfo.dns_forest.buffer = new short[] { 'f', 'o', 'r', 'e', 's', 't' };

        dnsDomainInfo.domain_guid = new rpc.uuid_t();
        dnsDomainInfo.domain_guid.time_low = 0x12345678;