Use hash_equals() for signature verification
Merge pull request #480 from sarciszewski/patch-1

Use hash_equals() for signature verification