src/utils.js (2 lines):
	- line 77: // XXX TODO: try to use something constant-time, in case calling code
	- line 84: // XXX TODO: try to use something constant-time, in case calling code