add constant time attack protection to the SHA256 encoder