Extract SecureCompare and check length instead

The padding method wasn't constant time, while I think this will be