Use constant-time signature verification. This fixes a timing attack that would allow attackers to forge messages.

For more information, see http://codahale.com/a-lesson-in-timing-attacks/
#134 Add streql to tox dependencies