Untested timing attack fix for pwstore-fast