Quick Audit? about aes-encryption

[paragonie-scott]

aes-encryption/src/AesEncrypter.php

Line 88 in f7347fe

Tebru\assert($mac === $this->strategy->getMac($encryptedData), new MacHashMismatchException('MAC hashes do not match'));

Timing side-channel. You should use hash_equals() for comparing MACs. :)

[defuse]

Sorry, I wish I had time to review this! I'll try to get v2 out ASAP. :)

[natebrunette]

@defuse No Worries

@paragonie-scott Thanks for the feedback!