pub fn cmov(c: Choice, dst: &mut [u8], src: &[u8])
Copy src over dst only when c is true, in constant time.
src
dst
c