A normal == may stop at the first different byte, which can leak information through timing. In Go use subtle.ConstantTimeCompare.