Avoiding timed-attacks in Security::checkHash