#include <mLib/dstr.h>
+#include "ct.h"
#include "key-data.h"
#include "paranoia.h"
#include "passphrase.h"
rmd160_macinit(&mc, &mk);
rmd160_machash(&mc, k->u.k.k + RMD160_HASHSZ * 2, sz);
rmd160_macdone(&mc, b + RMD160_HASHSZ);
- if (memcmp(b + RMD160_HASHSZ, k->u.k.k + RMD160_HASHSZ,
- RMD160_HASHSZ) != 0) {
+ if (!ct_memeq(b + RMD160_HASHSZ,
+ k->u.k.k + RMD160_HASHSZ, RMD160_HASHSZ)) {
rc = KERR_BADPASS;
goto fail;
}