Mitigate timing attacks in hash comparisons