careful to avoid timing attacks in the mac verify step
timing attacks