Use a constant time compare for comparing signatures