fix potential timing attack