pub fn constant_time_compare(a: &str, b: &str) -> bool
Constant-time string comparison to prevent timing attacks