$ npm install timing-safe-equal
provides a browserfiable crypto.timingSafeEquals that, when used in the browser, gives a shim and when used in node, gives you the native one if available, and if not the shim.
