Add hash_equals() to perform string comparisons that are not vulnerable to timing attacks.
Merge accepted RFC https://wiki.php.net/rfc/timing_attack into 5.6.