http://stackoverflow.com/questions/31919358/how-do-the-timing-attacks-works-and-why-symfonys-string-utils-suggest-a-precise The order of the parameters is now irrelevant.