Comparison for HMAC is time sensitive

[JoelLarson]

The HMAC comparison is susceptible to timing attacks. A better implementation of comparison should be used to prevent this information from being leaked.

https://en.wikipedia.org/wiki/Timing_attack

https://github.com/neoxia/laravel-openssl-encryption/blob/master/src/Neoxia/LaravelOpensslEncryption/Encrypter.php#L141

A simple fix would be:

if (! \Symfony\Component\Security\Core\Util\StringUtils::equals($this->hash($payload['value']), $payload['mac'])) {
        throw new DecryptException("MAC for payload is invalid.");
}