pub(crate) fn ct_eq(a: &[u8], b: &[u8]) -> bool
Byte-wise xor accumulate; no early exit on the first differing byte.