Issue #399 HMAC constant time compare