RustPython
diff --git a/‎Cargo.lock‎
Lines changed: 1 addition & 0 deletions b/‎Cargo.lock‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎Lib/test/test_hmac.py‎
Lines changed: 0 additions & 8 deletions b/‎Lib/test/test_hmac.py‎
Lines changed: 0 additions & 8 deletions
diff --git a/‎crates/stdlib/Cargo.toml‎
Lines changed: 1 addition & 0 deletions b/‎crates/stdlib/Cargo.toml‎
Lines changed: 1 addition & 0 deletions
diff --git a/‎crates/stdlib/src/hashlib.rs‎
Lines changed: 17 additions & 14 deletions b/‎crates/stdlib/src/hashlib.rs‎
Lines changed: 17 additions & 14 deletions
@@ -1484,19 +1484,11 @@ def test_compare_digest_func(self):
         else:
             self.assertIs(self.compare_digest, operator_compare_digest)
 
-    @unittest.expectedFailure  # TODO: RUSTPYTHON; AssertionError: TypeError not raised by compare_digest
-    def test_exceptions(self):
-        return super().test_exceptions()
-
 
 @hashlib_helper.requires_hashlib()
 class OpenSSLCompareDigestTestCase(CompareDigestMixin, unittest.TestCase):
     compare_digest = openssl_compare_digest
 
-    @unittest.expectedFailure  # TODO: RUSTPYTHON; AssertionError: TypeError not raised by compare_digest
-    def test_exceptions(self):
-        return super().test_exceptions()
-
 
 class OperatorCompareDigestTestCase(CompareDigestMixin, unittest.TestCase):
     compare_digest = operator_compare_digest
 
@@ -69,6 +69,7 @@ sha3 = "0.10.1"
 blake2 = "0.10.4"
 hmac = "0.12"
 pbkdf2 = { version = "0.12", features = ["hmac"] }
+constant_time_eq = { workspace = true }
 
 ## unicode stuff
 unicode_names2 = { workspace = true }
 
@@ -14,7 +14,6 @@ pub mod _hashlib {
             PyBaseExceptionRef, PyBytes, PyFrozenSet, PyStr, PyTypeRef, PyUtf8StrRef, PyValueError,
         },
         class::StaticType,
-        convert::ToPyObject,
         function::{ArgBytesLike, ArgStrOrBytesLike, FuncArgs, OptionalArg},
         types::{Constructor, Representable},
     };
@@ -724,22 +723,26 @@ pub mod _hashlib {
         a: ArgStrOrBytesLike,
         b: ArgStrOrBytesLike,
         vm: &VirtualMachine,
-    ) -> PyResult<PyObjectRef> {
-        const fn is_str(arg: &ArgStrOrBytesLike) -> bool {
-            matches!(arg, ArgStrOrBytesLike::Str(_))
-        }
-
-        if is_str(&a) != is_str(&b) {
-            return Err(vm.new_type_error(format!(
+    ) -> PyResult<bool> {
+        use constant_time_eq::constant_time_eq;
+
+        match (&a, &b) {
+            (ArgStrOrBytesLike::Str(a), ArgStrOrBytesLike::Str(b)) => {
+                if !a.isascii() || !b.isascii() {
+                    return Err(vm.new_type_error(
+                        "comparing strings with non-ASCII characters is not supported",
+                    ));
+                }
+                Ok(constant_time_eq(a.as_bytes(), b.as_bytes()))
+            }
+            (ArgStrOrBytesLike::Buf(a), ArgStrOrBytesLike::Buf(b)) => {
+                Ok(a.with_ref(|a| b.with_ref(|b| constant_time_eq(a, b))))
+            }
+            _ => Err(vm.new_type_error(format!(
                 "a bytes-like object is required, not '{}'",
                 b.as_object().class().name()
-            )));
+            ))),
         }
-
-        let a_hash = a.borrow_bytes().to_vec();
-        let b_hash = b.borrow_bytes().to_vec();
-
-        Ok((a_hash == b_hash).to_pyobject(vm))
     }
 
     #[derive(FromArgs, Debug)]