equality check to avoid timing attacks

# took from here
# http://codahale.com/a-lesson-in-timing-attacks/

def is_equal(a, b):
    if len(a) != len(b):
        return False

    result = 0
    for x, y in zip(a, b):
        result |= x ^ y
    return result == 0