private static boolean slowEquals(byte[] a, byte[] b) {
        int diff = a.length ^ b.length;
        for (int i = 0; i < a.length && i < b.length; i++) {
            diff |= a[i] ^ b[i];
        }
        return diff == 0;
    }
Compares two byte arrays in length-constant time. This comparison method
is used so that password hashes cannot be extracted from an on-line
system using a timing attack and then attacked off-line.
src/main/java/org/traccar/helper/Hashing.java