these are comparing authenticators and need to be constant time...
This could be a side channel attack... Now that we have a function
for this, use it...

jmgurney/ipsecgcm: 24d704cc and 7f37a14