comparing ab.Signature != signString(sts, sk) is insecure

[edulix]

you should use a constant time comparison if you don't want to be vulnerable to side channel timing attacks.

[onezero11010]

timestamp is already checked.
Then, is have some vulnerable points still?