fix byte-trickling DOS attack; timing side-channel (timestamps also prevented it)