constant time int comparison

 * Follows go subtle
   http://golang.org/src/pkg/crypto/subtle/constant_time.go

 /cc @defuse