Avoid possible timing attack in hash comparison (closes #3243)
Merge remote-tracking branch 'drebs/bug/3243-avoid-possible-timing-attack-in-hash-comparison' into develop