Integrity checking addition

This opens us up to timing attacks. I forget if we are just disregarding that?