Fixes #4131: Security adjustments
Security component adjustments: fixed comment style, hkdf() and pbkdf2() are now protected, compareString() is now public
Merge pull request #4458 from yiisoft/security-adjustments

Fixes #4131: Security adjustments