Use constant-time comparison for checking MAC tags.