Bugfix: compare tags in constant time to prevent timing attacks (thanks to Klaus Hartke for pointing this out)
more CCM test vectors, including empty messages and different L values