Updated pull

Fix to the timing-leak for the length of the password.