secure_memcmp compares two binary strings in constant time. It's only available when haproxy is compiled with USE_OPENSSL.
Tim Duesterhus