[Security] added a timing attack resistant string comparison that resists length leaking
Added a hmac-sha512 (by default) based string comparison function using 128bit random keys.