PR for issue #3

... a timing attack to brute force a signature