Fix for timing attacks on MAC verification.