1 files changed, 7 insertions, 21 deletions
diff --git a/security-utils/src/main/java/com/yahoo/security/SideChannelSafe.java b/security-utils/src/main/java/com/yahoo/security/SideChannelSafe.java
index bd085f6f624..3a46891085f 100644
--- a/security-utils/src/main/java/com/yahoo/security/SideChannelSafe.java
+++ b/security-utils/src/main/java/com/yahoo/security/SideChannelSafe.java
@@ -1,6 +1,8 @@
 // Copyright Yahoo. Licensed under the terms of the Apache 2.0 license. See LICENSE in the project root.
 package com.yahoo.security;
 
+import org.bouncycastle.util.Arrays;
+
 /**
  * Utility functions for comparing the contents of arrays without leaking information about the
  * data contained within them via timing side-channels. This is done by avoiding any branches
@@ -13,18 +15,11 @@ package com.yahoo.security;
 public class SideChannelSafe {
 
     /**
-     * @return true iff all bytes in the array are zero. An empty array always returns false
-     *         since it technically can't contain any zeros at all.
+     * @return true iff all bytes in the array are zero. An empty array always returns true
+     *         to be in line with BouncyCastle semantics.
      */
     public static boolean allZeros(byte[] buf) {
-        if (buf.length == 0) {
-            return false;
-        }
-        byte accu = 0;
-        for (byte b : buf) {
-            accu |= b;
-        }
-        return (accu == 0);
+        return Arrays.areAllZeroes(buf, 0, buf.length);
     }
 
     /**
@@ -32,23 +27,14 @@ public class SideChannelSafe {
      * about the contents of either of the arrays.
      *
      * <strong>Important:</strong> the <em>length</em> of the arrays is not considered secret, and
-     * will be leaked if arrays of differing sizes are given.
+     * <em>may</em> be leaked if arrays of differing sizes are given.
      *
      * @param lhs first array of bytes to compare
      * @param rhs second array of bytes to compare
      * @return true iff both arrays have the same size and are element-wise identical
      */
     public static boolean arraysEqual(byte[] lhs, byte[] rhs) {
-        if (lhs.length != rhs.length) {
-            return false;
-        }
-        // Only use constant time bitwise ops. `accu` will be non-zero if at least one bit
-        // differed in any byte compared between the two arrays.
-        byte accu = 0;
-        for (int i = 0; i < lhs.length; ++i) {
-            accu |= (byte)(lhs[i] ^ rhs[i]);
-        }
-        return (accu == 0);
+        return Arrays.constantTimeAreEqual(lhs, rhs);
     }
 
 }