Use constant-time array comparison

Author: y-a-n-n

src/main/java/com/smartmovesystems/hashcheck/FirebaseScrypt.java

@@ -10,7 +10,7 @@
 import java.nio.charset.StandardCharsets;
 import java.security.GeneralSecurityException;
 import java.security.Key;
-import java.util.Arrays;
+import java.security.MessageDigest;
 import java.util.logging.Level;
 import java.util.logging.Logger;
 
@@ -71,7 +71,7 @@ public static boolean check(String passwd, String knownCipherText, String salt,
 
         byte[] knownCipherTextBytes = Base64.decodeBase64(knownCipherText.getBytes(CHARSET));
 
-        return Arrays.equals(knownCipherTextBytes, cipherTextBytes);
+        return MessageDigest.isEqual(knownCipherTextBytes, cipherTextBytes);
     }
 
     private static Key generateKeyFromString(byte[] keyVal) {