string-timing-safe-equal

crypto.timingSafeEqual, but works with strings