User tests: Successful: Unsuccessful:
Comment added: alternative comparison function that doesn't require bitwise operators and still mitigates timing attacks. The weird % hack is probably fine, but it's not necessary.