@Override
    public boolean equals(Object o) {
        if (this == o) return true;
        if (o == null || getClass() != o.getClass()) return false;
        TokenCheckHash tokenCheckHash = (TokenCheckHash) o;
        // Although not considered secret information, avoid leaking the contents of
        // the check-hashes themselves via timing channels.
        return SideChannelSafe.arraysEqual(hashBytes, tokenCheckHash.hashBytes);
    }
A token check hash represents a hash derived from a token in such a way that
distinct "audiences" for the token compute entirely different hashes even for
identical token values.
security-utils/src/main/java/com/yahoo/security/token/TokenCheckHash.java