[trebor]

It's also pretty sad that they didn't use a constant time comparison function. Whether it exists in the target language standard library or not, it's easy enough to write one.

[muaddirac]

Wanted to add that as of 3.3, Python has a nice constant-time compare built in: https://docs.python.org/3/library/hmac.html#hmac.compare_dig...

[d0vs]

2.7 actually

https://docs.python.org/2.7/library/hmac.html#hmac.compare_d...