Update md5.rb

Separated patch to fix timing attack
Merge pull request #542 from snyff/patch-2

Update md5.rb