pub fn ct_eq(a: &[u8], b: &[u8]) -> bool
Constant-time byte-slice equality (XOR accumulate). Public so bearer comparisons outside this module (e.g. the operator login token check) can avoid the timing side channel of ==.
==