Note that I am not one to FREAK OUT at every use of `String#==` either[1][1] :P But given the attack this patch is intending to mitigate, I think it's warranted

[1]: https://github.com/pbhogan/scrypt/pull/15