Use MessageDigest.isEquals method when comparing signatures in NTLMEn…

…gineImpl

Signed-off-by: Andrea Cosentino <[email protected]>

httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/NTLMEngineImpl.java

@@ -926,7 +926,7 @@ private boolean validateSignature( final byte[] signature, final byte[] message
             //            log.info( "SSSSS validateSignature("+seqNumber+")\n"
             //                + "  received: " + DebugUtil.dump( signature ) + "\n"
             //                + "  computed: " + DebugUtil.dump( computedSignature ) );
-            return Arrays.equals( signature, computedSignature );
+            return MessageDigest.isEqual( signature, computedSignature );
         }
 
         public byte[] signAndEncryptMessage( final byte[] cleartextMessage ) throws NTLMEngineException