Address splint crash under new code
Remove int -> unsigned int comparisons.
Implement constant-time comparison.