Add short circuit test for empty cipher text
Fix HMAC comparison to use scmp for constant time comparison