> > + while (n-- > 0) > > + x |= a[n] ^ b[n]; > > Won't compare the bytes at [0].
Uh? It will, n gets decremented after the test but before the x |= statement. > I think switching this to be > timingsafe_bcmp would be better, then we only have copy. Agreed.
