Constant time comparison for SigV4a (#3174)

Closes #3162 

----

_By submitting this pull request, I confirm that you can use, modify,
copy, and redistribute this contribution, under the terms of your
choice._

---------

Signed-off-by: Daniele Ahmed <ahmeddan@amazon.de>
Co-authored-by: Russell Cohen <rcoh@amazon.com>