pub fn ct_eq(a: &[u8], b: &[u8]) -> bool
Constant-time byte-slice equality (short-circuits on a length mismatch only).