add secure variants of update and digest

Signed-off-by: Mattias Andrée <maandree@operamail.com>
benchmark with cpu-time

Signed-off-by: Mattias Andrée <maandree@operamail.com>