raising early like this leads to a timing side-channel in the padding validation?