Critical: Illegal Authentication Timing Hazard