WSSE Auth: Timing safe digest comparison