pub fn ct_verify(a: &[u8], b: &[u8]) -> bool
Constant-time byte-slice equality (length is not secret; contents compared in constant time so a partial match doesn’t leak via timing).