Use constant-time memcmp when comparing sensitive buffers