Support different length hash compare.

Author: Eric Elliott

credential.js

@@ -132,13 +132,12 @@ var crypto = require('crypto'),
   /**
    * constantEquals(x, y)
    *
-   * Compare two equal-length hashes, x and y with a
-   * constant-time algorithm to prevent attacks based on
-   * timing statistics.
+   * Compare two strings, x and y with a constant-time
+   * algorithm to prevent attacks based on timing statistics.
    */
   constantEquals = function constantEquals(x, y) {
     var result = true,
-      length = y.length,
+      length = (x.length > y.length) ? x.length : y.length,
       i;
 
     for (i=0; i<length; i++) {

package.json

@@ -1,6 +1,6 @@
 {
   "name": "credential",
-  "version": "0.2.1",
+  "version": "0.2.2",
   "description": "Easy password hashing and verification in Node. Protects against brute force, rainbow tables, and timing attacks.",
   "main": "credential.js",
   "directories": {