Message 163193 - Python tracker
> I'm well aware of the fact that they have different timings. That's > why I argued against including a unicode aware variant of the timing > safe compare function. I would not want to repeat myself, but the compare function can be made safe if it restricts itself to a given kind of unicode string (say, all-ASCII).