Use secure compare for signature verification