crypto_ct_eq_mask_u8
mask = crypto_ct_eq_mask_u8(valid, 1);
if (mask != crypto_ct_eq_mask_u8(a, b)) {
"want %x\n", a, b, crypto_ct_eq_mask_u8(a, b), mask);